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IMPROVING CUSTOMER SERVICE FOR THE 
COPYRIGHT COMMUNITY: ENSURING THE 
COPYRIGHT OFFICE AND THE LIBRARY OF 
CONGRESS ARE ABLE TO MEET THE DE- 
MANDS OF THE DIGITAL AGE 


WEDNESDAY, DECEMBER 2, 2015 

House of Representatives, 
Committee on House Administration, 

Washington, DC. 

The Committee met, pursuant to call, at 11:11 a.m., in room 
1310, Longworth House Office Building, Hon. Candice S. Miller 
(chairman of the Committee) presiding. 

Present: Representatives Miller, Harper, Nugent, Davis, Com- 
stock, Walker, Brady, Lofgren, and Vargas. 

Staff Present: Sean Moran, Staff Director; John Clocker, Deputy 
Staff Director; Bob Sensenbrenner, Deputy General Counsel; John 
L. Dickhaus, Legislative Clerk; Erin McCracken, Communications 
Director; Reynold Schweickhardt, Director of Technology Policy; 
Brad D. Walvort, Professional Staff Member; Edward J. Puccerella, 
Professional Staff Member; Jamie Eleet, Minority Staff Director; 
Matt Pinkus, Minority Senior Policy Advisor; Khalil Abboud, Mi- 
nority Deputy Staff Director/Director of Legislative Operations; 
Mike Harrison, Minority Chief Counsel; and Eddie Elaherty, Mi- 
nority Chief Clerk. 

The Chairman. We will move on and now call to order the Com- 
mittee on House Administration’s hearing today, which is going to 
be on the U.S. Copyright Office. 

The hearing record will remain open for 5 legislative days so that 
members may submit materials that they wish to be included. [The 
information follows:] 

The Chairman. Today we are holding this hearing to discuss the 
current IT functionality of the Library of Congress’ Copyright Of- 
fice, areas where the Copyright Office is focused on improving their 
overall customer service, and how, working together, the leadership 
within the Library and its Copyright Office are meeting the de- 
mands of today’s digital age. 

We would ask our witnesses to come forward. I see them as we 
are making our opening remarks. 

Wow, you were all back in that room? Okay. 

The Copyright Office is one of seven business units within the Li- 
brary of Congress and operates using both appropriated funds as 
well as the fees that it collects for copyright registration, recorda- 
tion, and statutory licensing to manage the disbursement of royalty 
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payments. Each year the Library’s Copyright Office examines ap- 
proximately a half a million creative works, such as books or songs, 
movies, software, Internet platforms, and provides a copyright of 
authorship to those individual products. 

The Library is charged to administer our Nation’s system of 
copyright law, which it inherited back in 1870. It is really a huge 
responsibility that promotes innovation and creativity. For writers, 
singers, producers, IT developers, the copyright process provides 
clear lines of authorship and ownership of their creative products 
and protects them as they are distributed throughout the world, a 
task that is becoming increasingly complex and challenging in to- 
day’s digital world. 

Today, of course, we are streaming and we are downloading con- 
tent. We are using social media and multifaceted Internet plat- 
forms and software, constantly updated to improve customer inter- 
face and security. 

The mission of the Copyright Office, which is so critical to inno- 
vative growth in the world today, is to provide customers with the 
assurance that their hard work and investment will be protected. 
It is to instill the confidence people need to invest in a new idea 
or a new product. Again, in today’s fast-moving digital world that 
assurance is increasingly difficult to provide. 

So the technology and business model needs to evolve for today’s 
customers. It does so with each of the seven units, and the Li- 
brary’s central IT office plays a critical role in supporting the Copy- 
right Office, including providing a technology infrastructure and 
the support for needed capital improvements. The two entities rely 
very heavily on one another. 

Understanding the scope and significance of this operation, it is 
very concerning to read the GAO report that was released just ear- 
lier this year outlining the Library’s longstanding weaknesses 
across several IT areas, including Copyright. According to the re- 
ports, operational and organizational challenges within the Library 
and its Copyright Office have resulted in a serious backlog with the 
registration and recordation system, causing extensive wait times, 
some as long as 18 months, as has been noted. 

In addition to outdated technologies and insufficient IT capabili- 
ties, especially with the recordation process, the GAO also identi- 
fied deficiencies related to data integrity and security. It also high- 
lighted the lack of a Library-wide strategic plan to address all of 
these problems. 

In its report, the GAO included 31 recommendations for the Li- 
brary to address these weaknesses. Perhaps most importantly, they 
also highly recommended that the Library hire a Chief Information 
Officer. So our Committee, of course, will be looking for an update 
on where the Library is with these recommendations and as well 
what caused a recent IT service outage that affected a number of 
Library-supported systems, including the Copyright Office. In fact, 
for more than a week, an entire week in September, the online 
copyright registration system, which is referred to as eCO, was 
down for a week because of the outage. 

So the Committee obviously wants to hear from the Library re- 
garding the current IT system and how those operations have been 
impacting its Copyright Office in the copyright community. The 
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Committee is also interested to hear how overall customer service 
experiences will he improved. 

The Committee will also he hearing from the Register of the 
Copyright Office today and how the Copyright Office’s own man- 
agement structure fits within the broader Library system, if the 
Copyright Office is receiving the required support from the Library, 
and how these two entities, again, are working together to correct 
the current issues that they face today. 

Finally, we will be hearing from the GAO about the problems 
identified in the March report and the Library’s progress imple- 
menting its recommendations. 

I would just note that I know there have been a number of peo- 
ple who have been advocating for some period of time that the 
Copyright Office actually be independent from the Library, but that 
is not the purpose of today’s hearing. That is not what we are talk- 
ing about today. Today we want to hear how Library management, 
both the Acting Librarian and the Register of Copyrights, are work- 
ing together diligently to fix the immediate problems before them 
to improve their operations and customer support. 

I want to thank our witnesses for their appearance, and I will 
more formally introduce them in just a moment. But now I would 
like to recognize my colleague and the ranking member of the Com- 
mittee, Mr. Brady, for purposes of his opening statement. 

Mr. Brady. Thank you. And I want to thank the Chairman for 
calling this important hearing today. And I would like to congratu- 
late David Mao on his new responsibilities as Acting Librarian of 
Congress. 

Madam Chairman, I have a longer statement for the record, but 
would like to make a few comments before we hear from our wit- 
nesses. 

I want to be clear that I support keeping the Copyright Office in 
the Library of Congress, but I also want to be clear that the Li- 
brary of Congress needs to support the Copyright Office. This 
starts with solid operations support, including a laser-like focus on 
informational technology, and I hope to hear today how the Library 
of Congress offices are working together to provide creators and in- 
ventors good customer service. 

I am pleased with the work that David and his team at the Li- 
brary have done, but that is just a start, and I look forward to 
hearing about how we could continue to make important progress 
in this area. 

I thank the Chairman again, and I yield back the balance of my 
time. 

[The statement of Mr. Brady follows:] 
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Improving Customer Service for the Copyright Community: 

Ensuring the Copyright Office and the Library of Congress are able to meet the demands of the 

digital age 

Statement for the Record 
Ranking Member Robert A. Brady 


I want to thank the Chairman for calling this important hearing today and I’d like to congratulate 
David Mao on his new responsibilities as Acting Librarian of Congress. 

I want to be clear that I support keeping the Copyright Office in the Library of Congress. But 1 
also want to be clear that the Library needs to support the Copyright Office. This starts with 
solid operational support, including a laser like focus on information technology. I hope to hear 
today how the Library and the Copyright Office are working together to provide creators and 
inventors good customer service. I am pleased with the work that David and his team at the 
Library have done, but that is just a start, and I look forward to hearing about how we continue to 
make important progress in this area. 

The Copyright Office is a gift inside a national treasure, our national library. And it is required 
to play many roles. It administers the complex copyright laws of the country but also serves as 
an adviser to Congress on copyright issues and represents the United States abroad in matters 
affecting our creative economy and intellectual property. Estimates indicate that core copyright 
industries contribute an astounding $1 trillion dollars to our gross domestic product. So not only 
is the Copyright Office an important part of the Library of Congress, it is key component of 
protecting our economy as well. 

The Library of Congress has been plagued with information technology challenges for years. 
While Acting Librarian Mao has made a substantial down payment on remedying these 
problems, work remains. 

The Senate Appropriations Committee instructed the Government Accountability Office (GAO) 
to assess the Copyright Office’s IT needs and whether or not there budget request aligned with 
other Library of Congress goals, served the best interest of Copyright stakeholders, and overall 
was good value for the taxpayer. In March 201 5, we got the results. 

GAO determined the Copyright Office was found to not have sufficiently justified their budget 
request of $ 7 million. GAO also observed that the Copyright Office failed to align their strategic 
information technology plan with the wider Library of Congress’ strategic plan. 

That is a basic failure of leadership at the Copyright Office to work with its internal stakeholders. 
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It is my expectation that the Librarian and the Copyright Office work together, with the support 
of this principal oversight to fix these problems. 

We value the Library of Congress. But the Library also needs to be prepared to harness advances 
in technology that have given way to greater avenues of content distribution and has positioned 
the Copyright Office in the middle of this growing part of our economy. 

I understand, and appreciate, the transition happening at our Library. After three decades of Dr. 
Billington’s leadership, I know that this change might be unsettling for the Library community. 
But change is not a reason to do nothing. We must continue to make investments to meet the 
immediate and long term needs, of this crucial function of the Library. 1 know that David 
understands that, and GAO has given us a good road map to make those investments. 1 look 
forward to hearing from the witnesses on the next steps. Thank you, Madame Chairman. 
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The Chairman. I thank the gentleman. 

I would also like to congratulate David Mao as I formally intro- 
duce him. He became the Acting Librarian on October 1, 2015. 

So you are just getting your feet wet, so to say, but not really 
because he had previously served as Deputy Librarian of Congress 
from January 12 of 2015, and before that he was the 23rd Law Li- 
brarian of the Congress, serving in that position since January of 
2012. He also has experience in the Library working as the section 
head for the Congressional Research Service and also became the 
first Deputy Law Librarian of Congress. He also has experience in 
the private sector, working in private practice for a number of 
years. 

He graduated from George Washington University, obtained his 
law degree from Georgetown University Law Center, and also has 
a master’s degree in Library Science from the Catholic University 
of America. 

So we welcome you, sir. 

Maria Pallante was appointed as the Register of Copyrights on 
June 1, 2011, after serving 5 months as the Acting Register of the 
Copyright Office. She also served as the Copyright Office — served 
it as Deputy General Counsel from 2007 to 2008 and as an Asso- 
ciate Register and Director of Policy and International Affairs from 
2008 to 2010. 

Ms. Pallante also has extensive experience working in the area 
of copyright. Before coming to this office, she also worked as the 
assistant director of the Authors Guild, Inc., and then as executive 
director of the National Writers Union, focusing on copyright pol- 
icy, transactions, litigation, and freedom of expression issues. 

She is a 1990 graduate of the George Washington University 
Law School. She earned her bachelor’s degree from Misericordia — 
I hope I am pronouncing that correctly — University in Pennsyl- 
vania. 

Finally, Joel Willemssen is the Managing Director of Information 
Technology Issues at the U.S. Government Accountability Office. In 
this position he has overall responsibility for the GAO’s evaluations 
of information technology across the Federal Government. 

Since joining the GAO in 1979, he has led numerous reviews of 
information technology systems and management at a wide array 
of Federal agencies. He frequently testifies on information tech- 
nology issues before congressional committees, appearing as a GAO 
witness on more than 100 occasions. 

So you are pretty old hat at this, I would say. We appreciate you 
being here. 

He received his bachelor and master’s degree in business admin- 
istration from the University of Iowa. 

So, again, we thank you all for joining us. At this time the chair 
would recognize the Librarian of Congress, David Mao. 
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STATEMENTS OF DAVID S. MAO, ACTING LIBRARIAN OF CON- 
GRESS; MARIA A. PALLANTE, REGISTER OF COPYRIGHTS 

AND DIRECTOR OF THE UNITED STATES COPYRIGHT OF- 
FICE; JOEL C. WILLEMSSEN, MANAGING DIRECTOR, IN- 
FORMATION TECHNOLOGY— U.S. GOVERNMENT ACCOUNT- 
ABILITY OFFICE 

STATEMENT OF DAVID S. MAO 

Mr. Mao. Thank you. Thank you, Chairman Miller, Ranking 
Member Brady and Members of the Committee. Good morning. I 
am honored to testify before you today in my ninth week as Acting 
Librarian of Congress. 

Since 1800, the Library has faithfully served Congress. Congress 
placed the copyright function in the Library in 1870, and since 
then the Library has contributed to the government’s constitutional 
role to promote the progress of science and useful arts. Copyright 
deposits have been a resource for generations of Americans and we 
take seriously our stewardship of this important record of Amer- 
ica’s heritage. 

Factors leading to the 1870 act still exist today; however, im- 
provements are needed. Copyright law needs to be updated. Regu- 
lations and processes must keep pace with the demands and expec- 
tations of copyright users. The Copyright Office infrastructure 
needs to be strengthened and modernized. 

The Library is a resource of knowledge that furthers intellectual 
and creative activity and customer service is crucial to our work. 
I know the Register shares my goal to provide services when, 
where, and in whatever form modern users expect and demand. We 
will work together to develop the updated processes and modern- 
ized systems to meet the needs of and serve our customers and 
stakeholders. 

The Library has developed more than 250 enterprise systems 
and applications over the past 50 years. While achieving these suc- 
cesses, though, some areas have not kept pace with the develop- 
ment of technology and general standards and best practices. I as- 
sure you that these are a top priority. We have work to do to 
achieve a high-performing IT environment that supports the entire 
Library of Congress in serving you and the American people, and 
we are firmly committed to achieving this objective. 

GAO’s March report documented IT issues that require imme- 
diate attention. As Acting Librarian of Congress, I accept responsi- 
bility for implementing strategies to forge a new path forward. 
These strategies are built on three key pillars: leadership, collabo- 
ration, and secure accessibility. 

First, GAO identified the lack of a permanent Chief Information 
Officer. I am happy to report that Mr. Bud Barton joined the Li- 
brary as permanent CIO this past September. He heads the newly 
aligned Office of the CIO, specifically focused on providing IT lead- 
ership and services. With his guidance, the Library began imple- 
menting changes to ensure that IT strategic planning, procure- 
ment, and management are considered at the appropriate levels 
and consistent across the Library. The CIO and I meet weekly to 
review the status of these changes and issues identified by the 
GAO and the Library’s inspector general. 
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Second, collaboration is essential to managing IT investments 
and resources effectively. The Library is committed to providing an 
IT framework built upon performance, reliability, security, and 
adaptability, and that allows flexibility for specialized systems best 
managed at the unit level. The CIO is implementing agreements 
across the Library for delivery of IT infrastructure and services to 
support normal business operations. We are in a time of change 
and recognize that ongoing communication and adjustment is nec- 
essary to ensure that collaboration continues successfully. 

We share GAO concerns about potential duplication in IT serv- 
ices between the Office of CIO and Library units; however, an en- 
terprise model provides for individual control of critical systems 
and development processes while also ensuring effective use of re- 
sources and preventing investment overlap. 

Third, ensuring security while allowing access to data is one of 
the most significant challenges in handling digital content. Collec- 
tion items such as paper and books are relatively easy to protect. 
Digital content, on the other hand, requires secure storage systems, 
backups for data protection and preservation, and access manage- 
ment policies for users. These challenges are complex, but not in- 
surmountable. The Library has a long history of protecting digital 
content while simultaneously making it accessible and we are 
proud of our record of doing so. We will take the steps required to 
ensure copyright materials remain secure. 

The Library is committed to reaching for the highest levels of 
customer service, and I am confident that our current strategies 
and planned improvements will allow for us to do so. We are work- 
ing closely with the GAO audit team and the Library’s inspector 
general to fulfill their recommendations. 

Chairman Miller, Ranking Member Brady, and Members of the 
Committee, thank you for the opportunity to speak with you today. 
You will find additional detail on recent IT management improve- 
ments in my written statement. I look forward to responding to 
your questions. 

[The statement of Mr. Mao follows:] 
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BIOGRAPHY OF DAVID S. MAO, ACTING LIBRARIAN OF CONGRESS 

David S. Mao became Acting Librarian of Congress Oct 1, 2015, upon the retirement of James H. 
Billington. 

As Acting Librarian, Mao oversees the entire Library and its various service units to ensure the 
Library's services to Congress and the American people are provided effectively. 

Mao previously served as Deputy Librarian of Congress, appointed January 12, 2015. During his 
time as Deputy, Mao oversaw a strategic re-alignment of Library service units, the appointment 
of a new Chief Operating Officer and the hiring of a new Chief Information Officer. 

Before being named Deputy Librarian, Mao was the 23''* Law Librarian of Congress, serving in 
that position since January 2012. As Law Librarian, Mao managed the operation and policy 
administration of the Law Library of Congress, which contains the world's largest collection of 
legal materials and serves as the leading research center for foreign, comparative, and 
international law. Mao often described the position as part law librarian to Congress, part 
steward for the law collections, and part ambassador to the word's legal and library 
communities. 

During his tenure as Law Librarian, Mao expanded the Law Library's collections, particularly in 
the area of rare law books; oversaw improvements to on-site law collection storage and 
renovation of the Law Library reading room; initiated new strategies to make U.S. public domain 
legal materials accessible online; and brought to the Library a 1215 Magna Carta for an historic 
exhibition on the eve of the Great Charter's 800th armiversary. 

Prior to becoming the Law Librarian of Congress, Mao served as the first Deputy Law Librarian 
of Congress, working as a key member of the Law Library's leadership team. He managed the 
Law Library's global legal research portfolio, including the Global Legal Research Center and the 
Global Legal Information Network. Prior to his appointment as Deputy Law Librarian, Mao was 
a section head at Congressional Research Service (CRS), Library of Congress. 

Mao is a graduate of The George Washington University, where he majored in international 
affairs with a minor in Chinese language and literature. After earning his law degree from the 
Georgetown University Law Center, Mao was in private practice for several years before 
returning to graduate school to pursue a master's degree in library science at The Catholic 
University of America. Before arriving at CRS in 2005, he held positions at the Georgetown 
University Law Library and within the research library of the international law firm of Covington 
and Burling LLP. He also was an adjunct professor at the University of Maryland-College Park. 

Mao served a three-year term as the treasurer of the American Association of Law Libraries and 
was a member of its executive board. A member of the American Bar Association, he is admitted 
to the bar of the District of Columbia. 
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Statement of David S. Mao 
Acting Librarian of Congress 
before the 

Committee on House Administration 
U. S. House of Representatives 
December 2, 2015 

"Improving Customer Service for the Copyright Community: 

Ensuring the Copyright Office and the Library of Congress 
are able to meet the demands of the digital age" 

Chairman Miller, Ranking Member Brady, and Members of the Committee: 

This is my first opportunity to testify before the committee since becoming Acting Librarian 
nine weeks ago. Dr. James H. Billington appointed me to be Deputy Librarian in January 
2015. Before becoming Deputy, I served five years in the Library's Congressional Research 
Service and five years in the Law Library, most recently as Law Librarian of Congress. 

I look forward to continuing our work together in enhancing the services the Library 
provides the American people and the Congress. With a new senior executive team and 
organizational alignment, an updated strategic plan, and increased focus on knowledge- 
based and data-driven management, the Library is actively addressing current challenges, 
including those that are the focus of this hearing, and I am optimistic that it is positioned 
for the future and prepared for its new leadership. 

Carved on the front of the Library of Congress Madison building are the following words. 

"Knowledge will forever govern ignorance 
and a people that mean to be their own governors 
must arm themselves with the power that knowledge gives." 

President Madison's powerful statement undergirds the mission of the Library of Congress: 
to provide Congress and the American people with a rich, diverse, and enduring source of 
knowledge that supports Congress in fulfilling its constitutional duties and empowers 
America in its intellectual, creative, and civic endeavors. 

We at the Library want it to be engaging, inspiring, and useful. It is not merely for love of 
statistics that we say this library that Congress has sustained for more than 215 years is the 
largest collection of the world's recorded knowledge ever assembled by one institution; that 
the Library holds over 160 million items and includes the world's largest collections of legal 
materials, films, sound recordings, and maps; that its dedicated staff has provided research 
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and analysis for the Congress for 100 years through the Congressional Research Service 
(CRS) and for almost 200 years through the Law Library; and that the Library has worked 
to "promote the progress of science and useful arts" since becoming the national home of 
the copyright function in 1870. Copyright is an integral part of the Library's role as a driver 
of U.S. creativity and innovation. Motivation to create and share the fruits of the mind is 
diminished without the protection for intellectual property that copyright provides. For 145 
years, the Library has been not only the home of knowledge, but also its staunchest 
defender. The numbers and history remind us of the scope of this great institution. We are 
proud of the Library's role as a knowledge resource and its continuing service of the public 
good. 

We take very seriously our duty as stewards of this precious resource and as servants of 
current and future generations. We also appreciate the realities of the digital age: the 
change it has brought to the forms of knowledge that are our stock in trade, to the tools we 
use to deliver our services, and to the expectations of our users, including the clients of the 
Copyright Office. 

The last ten months at the Library have been eventful. We have looked closely at our 
strategic goals, organizational structure, and management. In responding to key audit 
reports, we are incorporating federal and industry best practices into updated information 
technology (IT) governance and operations. Making progress on these fronts is essential to 
delivering effective service to the copyright community and others who rely on the Library 
of Congress. Today I will: 

• update you on organizational and IT efforts, and 

• discuss modernization of the U.S. Copyright Office. 


Library Management, Organization and Strategic Goais 

The Library is in an important period of transition, and we have assembled an executive 
team and completed an agency realignment to ensure strong momentum going forward. 
This executive team includes Chief of Staff Robert R. Newlen, who has devoted 40 years to 
the Library of Congress in several offices in CRS and as Assistant Law Librarian. He has a 
deep understanding of the services the Library offers to the Congress and the American 
people. 

My colleague Maria A. Pallante, Register of Copyrights, has testified before this Committee, 
and you are of course very familiar with Congressional Research Service Director Mary 
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Mazanec. The Library also has new executives to lead the units that together manage the 
national collection. 

J. Mark Sweeney became the permanent Associate Librarian for Library Services in 
February this year. As a former Director of Preservation and Chief of the Main Reading 
Room, Mr. Sweeney joins me in expressing deep gratitude to the Congress for approving 
the joint request from the Library and the Architect of the Capitol to lease temporary 
collections space. The leased space will relieve overcrowded Capitol Hill shelves and 
provide a critical bridge to Module 5— the next high-density preservation and storage 
module the Architect is building for the Library at Fort Meade. 

Jane D. McAuliffe, previously head of the Library's John W. Kluge Center, is now Director 
of National and International Outreach (NIO). NIO is a new unit that unites programs that 
share the national collection with the world— fellowship, intern, and teacher training 
programs; exhibitions and publishing; services to federal libraries and other customers; 
library service for the blind and physically handicapped; digital partnerships; the Poet 
Laureate Consultant in Poetry and the Young Readers Center; and celebrations of literacy 
and creativity such as the National Book Festival. A scholar and experienced college 
president, Dr. McAuliffe brings both skill and vision to these exciting programs. 

In early October this year, Roberta 1. Shaffer— who served as Law Librarian of Congress 
and Associate Librarian for Library Services until her retirement in 2014— agreed to return 
temporarily to lead the Law Library while we finalize the national search for a permanent 
Law Librarian. 

In addition to these leaders of programmatic units, the Library has new leadership in 
critical management positions. 

In May, Edward R. Jablonski became the new Chief Operating Officer and supervises 
management support services that include contracting, finance, facilities and support 
services, security, emergency preparedness, human resources, and IT. Mr. Jablonski served 
as the CRS Associate Director for Finance and Administration and, in his prior naval career, 
as Deputy Commander and Comptroller of the Naval Sea Systems Command, among other 
posts. 

Mary Klutts, well known to you as the Library's Budget Officer, in January was named the 
Chief Financial Officer and brings to the position of CFO a thorough grasp of Library 
programs and finances, and understanding of the support the Library provides to fellow 
legislative branch agencies through cross-servicing arrangements. 
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I am also happy to report that in September Bernard A. Barton, Jr. became the Library's new 
permanent Chief Information Officer (CIO). Formerly the CIO and Deputy Administrator 
of the Department of Defense Technical Information Center (DTIC), Mr. Barton brings 
many years of information technology experience to the Library. Most recently, he 
provided executive direction in planning, implementing, and evaluating long-range IT 
activities at DTIC and managed the day-to-day activities of the organization. 

I want to acknowledge and thank Elizabeth R. Scheffler for stepping forward earlier this 
year to provide IT direction as the Library conducted a national search for a CIO. I thank 
my colleague Register Pallante for suggesting Ms. Scheffler and detailing her to the 
Library's central IT operation for eight months. Ms. Scheffler, Director of Public Records 
and Repositories for the U.S. Copyright Office, served from January through September as 
Interim Library CIO. During her tenure, she produced an interim IT strategic plan. The 
plan focuses on updating the Library's IT strategic governance process, finalizing the 
enterprise architecture, incorporating industry and federal best practices into operations 
and planning, and addressing infrastructure projects that will improve IT services Library- 
wide. With the interim plan, Mr. Barton has a solid foundation for development of a 
complete IT strategy that will support the Library's institutional strategic plan for the next 
five years. 

To revamp the Library's organization, we began in June to realign programs and 
operations. We created the NIO service unit to elevate outreach, educational, fee-for- 
service, and national service activities. We consolidated the institution- wide management 
support structure under a Chief Operating Officer in the Office of the Librarian. 

Most importantly, the realignment separated IT infrastructure, development, and support 
functions from digital collections and digital outreach functions. These distinct 
management support and programmatic functions had been combined in the former Office 
of Strategic Initiatives. Now, digital collections— both bom-digital materials and those 
digitized from analog— are managed alongside traditional materials as part of the national 
collection. Teaching with Primary Sources and other digital outreach efforts are managed 
in NIO. Without these programmatic responsibilities, the focus of the new Office of the 
Chief Information Officer (OCIO) is squarely on IT planning, management, and service 
delivery, including web development and repository development. 

On September 30, the Library published its 2016-2020 institutional strategic plan. The plan 
is a clear statement of the Library's mission, values, and functions. It provides a framework 
for our operations as we position ourselves for the future and prepare for new leadership. 
The plan identifies strategies and actions to achieve specific outcomes. Two strategies from 
the plan are particularly relevant for today's hearing. 
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• Deploying a dynamic, state-of-the-industry IT infrastructure across all parts of the 
Library that follows best practices and standards. 

Accomplishing this strategy includes harmonizing IT systems, ensuring security and 
continuity of operations; developing policies that allow location-independent access 
while protecting networks, data, and intellectual property; and providing 
technology-enabled access for the blind and physically handicapped and other 
communities with specialized access needs. Fundamental to this strategy is 
employing an IT governance structure that ensures accountability, efficiency and 
coordination in managing the institution's IT portfolio. 

• Working with the U.S. Copyright Office to develop modernized copyright systems 
and practices, in accordance with the copyright law and public objectives. 

Success with this strategy entails supporting modernization of the U.S. Copyright 
Office with respect to technology and infrastructure, registration services, and the 
accuracy, timeliness, and searchability of copyright records. Also important is 
working to assure the effective exchange of bibliographic data and the smooth 
transfer of the copyright deposits most critical to the current and future national 
collection. 


Information Technology Management and Operations 

The Library has focused in earnest on its information technology management challenges. 
In January, shortly after I became Deputy Librarian, the Library stopped temporary 
rotations into the position of CIO and began a nationwide recruitment effort that 
culminated with Mr. Barton's appointment. At that time we also began planning to realign 
the Library so that the OCIO could focus solely on IT functions. While these changes were 
pending, we brought Ms. Scheffler in from the U.S. Copyright Office and supported her 
with a hands-on Deputy CIO to begin addressing known issues. 

Early this spring, the Government Accountability Office (GAO) delivered companion audit 
reports to the Library that severely criticized both the institution's overall IT planning, 
management, and operations, and the U.S. Copyright Office's planning and justification for 
certain IT investments. The Library Inspector General (IG) also delivered reports on IT 
investment management and system development life cycle management. Together, these 
reports offered dozens of specific policy and operational recommendations to the Library. 
We welcome these examinations and the constructive guidance they give. 
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That knowledge and guidance has proven critical to developing the dynamic, state-of-the- 
industry IT infrastructure and management the Library needs. In many cases, the findings 
and recommendations confirmed the Library's own observations and plans to implement 
improved organization, infrastructure, and services to meet our vision of IT for the Library 
of Congress. The new CIO has prioritized, in his two months on the job, establishing 
productive relationships with Library components (and their IT operations) so that he can 
develop an understanding of their requirements and better deKver the IT services they 
need. 

The GAO report was structured around six themes. The themes are itemized below and 
include updates on some of the key actions undertaken in each area. 

• First, to provide strategic direction for use of IT resources through IT strategic 
planning, enterprise architecture improvement planning, and human capital 
planning. 

The Library has been using the interim IT strategic plan published in April of this 
year as a guide to improving operations. In the coming weeks, we will finalize a 
new IT strategic plan that is linked to the institutional strategic plan for fiscal years 
2016-2020. We established an office of IT Strategic Planning and Investment 
Management within the OCIO. This office has taken over updating the enterprise 
architecture and has established processes to define the future IT state and how best 
to achieve it. An outside expert is verifying and validating the work of this office 
and identifying changes that could be beneficial. We are developing an employee IT 
skills assessment that will be modeled on approaches used successfully in other 
organizations and will provide a baseline for future training and staff requirements. 

• Second, to provide a framework for effective IT investment decision-making and 
investment management. 

With the participation of Library stakeholders, we have refined an IT strategic 
governance process that defines roles among the Library's Executive Committee, IT 
Steering Committee, Architecture Review Board, and other governance bodies. Tire 
process is being incorporated into appropriate Library of Congress regulations and 
directives. 

The principal benefit of this process will be standardized documentation for 
investment proposals and regular reporting on investment status. We already are 
using such documents in decision-making. In a meeting on the Library's fiscal 2017 
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budget request, the Executive Committee worked from IT investment proposals that 
had been reviewed and annotated by the OaO and the relevant bodies. We will 
refine and expand the process going forward. 

Just as process and documentation are important, data are, too. This year we 
completed a physical inventory of Library IT assets. The data will inform our 
assessments of support requirements, life-cycle replacement, and other regular 
operational matters. We developed an approach for categorizing IT expenditures (in 
addition to basic budget object-class coding) that is being used in executing the fiscal 
2016 budget. The refined financial data will inform the Library's strategic planning. 

• Third, to plan and manage IT acquisitions to deliver required capabilities on time 
and within budget through cost estimating, scheduling, and risk management. 

With the IG's support, the Library has undertaken an analysis of IT-related outlays, 
which will help as we develop project management cost guidelines. These 
guidelines are being added to existing schedule and risk management principles. A 
new Project Management Office, which reports directly to the CIO, leads this effort. 

• Fourth, to protect IT systems and reduce the risk that they may be compromised. 

Like all federal agencies, the Library is keenly aware of the potential for compromise 
of its data. Among other security actions, this year we began implementation of the 
National Institute of Standards and Technology (NIST) risk management 
framework, and adopted government practices for conducting privacy impact 
assessments. 

• Fifth, to ensure that IT services meet the needs of component units. 

The Library has developed Service Level Agreements (SLAs) that describe baseline 
services the OCIO is providing to Library units with regard to email, other 
commodity IT, and basic services. Next, the CXIIO is working with program offices 
to develop supplemental agreements that establish shared expectations for support 
for mission-specific services and applications. 

• Finally, to allocate IT resources efficiently and effectively, reducing duplication or 
overlap. 

The Library shares the auditors' concerns about potential duplication or overlap in 
IT services between the OCIO and Library units. While commodity IT, 
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infrastructure, and security are most effective when managed centrally, we 
concluded that there are mission-specific program systems that are best managed at 
the service-unit level, in coordination with the Library OCIO. Within an enterprise 
IT model, the CIO will offer recommendations to the Executive Committee and to 
me as he develops a deeper understanding of the needs of each service unit and 
identifies possible synergies and cost savings. 

A consistent theme through all of the GAO and IG recommendations is the need for the 
Library to be more knowledge-based and data-driven in managing IT. With an experienced 
federal CIO and a re-energized IT shop, the Library is positioned to adopt government and 
industry best practices that make sense for the Library and to structure IT success around 
regular feedback from the systems themselves, from the budget and project reporting, and 
from users. 

The Library's new CIO started just as we experienced an IT-related problem. As the 
Committee is aware, m late August the Library had an outage of key systems, including 
Congress.gov, the U.S. Copyright Office electronic copyright registration system (eCO) and 
the Braille Audio Reading and Download (BARD) system of the National Library Service 
for the Blind and Physically Handicapped. 

Such a break in service to users is unacceptable and we deeply regret it. All the systems 
were restored to operation; however, the incident illustrates the operational challenges the 
Library must address at the same time it is implementing strategic IT management reforms. 

Every year, the Architect of the Capitol (AOC) performs required maintenance on the 
electrical systems in Library buildings. This work entails shutting off both normal and 
emergency power. As in previous years, a team of representatives from across the Library 
plaimed extensively for this year's power outage and system shutdown that was to occur 
over a weekend. The Library backed up applications and databases and successfully 
brought down servens, storage, and network devices. After receiving AOC approval, the 
Library begcin to bring systems back up. The restoration proceeded as planned except that 
a data storage unit containing several Library applications and parts of the eCO system 
failed during its startup sequence. 

A review determined that vendor error in replacing a hardware component of the storage 
unit caused the failure. While the vendor immediately corrected the installation error, the 
unit took 10 days to rebuild. 

The critical knowledge we gained from this failure is that we must have sufficient 
redundancy, capability, and security built into both the primary and alternate computing 
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facilities, and the CIO has already directed corrective actions. In addition, OCIO is 
researching data-facility and cloud-computing options that may be better able to support 
Library needs for continuous operation of critical systems. 

The inability to restart systems after the annual power outage was unusual; however, to 
ensure we properly identified lessons learned and actions to be taken, I asked the Library 
Inspector General to perform an independent review of the event. 

I have also asked the IG to conduct three additional reviews that will help improve IT 
management and service Library-wide, including service to the U.S. Copyright Office. 

• Review high priority Tier 1 systems and how they are configured. Congress.gov, the 
Library's web-based legislative information system, and eCO are two such Tier 1 
systems. 

• Look into best practices for storage infrastructure and make strategic and 
operational recommendations for current, intermediate, and long-term data storage 
needs. 

• Assist in calculating IT costs by activity and category in far greater detail than the 
Library has done previously. 

I am confident that with leadership from our new CIO, information from the IG, and 
methodical action by Library engineers, we will proactively address known issues and be 
better positioned to respond to unanticipated incidents in the future. 


U.S. Copyright Office Modernization 

As the Register recently noted in the U.S. Copyright Office strategic plan, "there is no 
question that [the Copyright Office] must modernize to meet current and future needs." The 
Library strategic plan calls for the institution as a whole to work with the Copyright Office 
to develop modernized copyright systems and practices, in accordance with the copyright 
law and public objectives. 

I am proud of the work of the U.S. Copyright Office and its very dedicated staff. As an 
attorney, I recognize the significance to authors, practitioners, and the courts that the 
Copyright Office published the 3d edition of The Compendium of U.S. Copyright Office 
Practices, the first comprehensive overhaul and restatement of the Copyright Office's 
practices and standards in over 25 years. Recent Copyright Office policy studies have 
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informed Congressional debate and public understanding on topics of broad interest such 
as the music marketplace, orphan works, and mass digitization, as well more esoteric topics 
that are part of the complex field that is copyright. The succinct analysis of federal court 
decisions the Copyright Office presents in its searchable online Fair Use Index makes the 
principles and application of the fair use doctrine more accessible and understandable. I 
also appreciate the public process the Copyright Office followed when updating its fee 
structure and the careful and thorough formal rulemaking it conducted regarding anti- 
circumvention exemptions under the Digital Millennium Copyright Act (DMCA). The 
Library decision in the recent DMCA rulemaking was recently published in the Federal 
Register. 

The Library has a fundamental interest in a strong copyright system. Too often, the 
description of the Library's interest in copyright is reduced to acquisition of materials for 
the national collection under the mandatory deposit provisions of the law. These materials 
are essential, of course, as they ensure a complete set of the expression of the nation's 
intellectual and creative work is available to inspire progress for current and future 
generations. Nevertheless, as an institution with a mission to support empowerment 
through knowledge, the Library supports the goals of the national copyright system. The 
work of the U.S. Copyright Office— advising Congress, the courts, and the executive branch 
on copyright matters; registering copyrights; facilitating commerce through licensing; and 
providing public access to records of copyright ownership, for example— is an integral part 
of the Library's mission to provide the knowledge that makes progress possible and ensure 
that creators' rights are protected so that progress continues. I am committed to 
supporting the Copyright Office's efforts as it begins to implement its own new strategic 
plan. 

Well-developed and flexible information technology systems are critical to the 
administration of both a modem Library of Congress and a modem Copyright Office. This 
is an area where the Copyright Office and the Library are working together to improve 
internal operations and better meet customer needs. For example, we have made some 
recent changes in IT management. First, a new approach to IT strategic governance 
establishes documentation requirements and review processes for all IT investments. The 
intent is to produce better-structured information upon which to make decisions and from 
which to track performance. The Copyright Office will maintain IT investment evaluation 
and selection processes for their mission-specific systems, with approval by the Librarian, 
provided they produce similarly auditable documentation and coordinate with the CIO on 
security and use of Library infrastmcture. Second, the Library started testing "agile" IT 
contracting methods. These methods are designed to make system development efforts 
move faster and be more responsive to user requirements. Finally, the Library is 
considering other data center and cloud-based computing options that can provide the 
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redundancy and capability required by Copyright Office customers and users of other 
Library services. 

The Library's support for the U.S. Copyright Office will draw upon the knowledge the 
Copyright Office has gained about its users through the public processes it has conducted 
over the past year. This knowledge, combined with the Library's increased focus on IT 
operations and industry standards should help us make great advances together. 

Chairman Miller and members of the Committee, I thank you again for this opportunity to 
provide testimony on key issues facing the Library. I am confident we are turning the page 
and implementing the necessary changes to make the Library and all its central functions 
better for the long term. I look forward to working closely with you on these challenges. 
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The Chairman. Thank you very much. 

The Chair now recognizes Register Pallante. 

STATEMENT OF MARIA A. PALLANTE 

Ms. Pallante. Chairman Miller, Ranking Member Brady, and 
Members of the Committee, thank you for holding this public hear- 
ing and for your concern in particular about customer service. 

My staff and I have dedicated the past few years to moderniza- 
tion issues, both assessing gaps in the copyright law and gaps in 
copyright administration. Through this work it has become clear to 
us that major operational changes are needed for the Copyright Of- 
fice if it is to meet the dynamic needs of the global marketplace 
that we serve. 

Technology is obviously the cornerstone of a modern copyright 
system. This is why in October 2011 I announced a number of 
multiyear special projects, including a technical upgrades project 
from which we published a major assessment of customer experi- 
ences and a series of baseline recommendations. The project team 
recommended that we develop a robust, responsive, and highly se- 
cure enterprise architecture decoupled from Library operations and 
dedicated to the unique and critical mission of administering the 
copyright law. 

I also created the first Chief Information Officer position on the 
Register’s management team in 2012. This Copyright Office CIO 
was a recommendation from public interest organizations and copy- 
right owners alike. But this is just the beginning. The Copyright 
Office will need a robust team of technology and data experts. 
These experts should not merely be assigned or on call from an- 
other part of the agency, but rather be integrated into the Copy- 
right Office mission where they can work side by side with legal 
and business experts and with direct, not indirect, accountability to 
the Register. 

Just yesterday I released an exciting 5-year plan, copies of which 
you should have received, that draws upon several years of delib- 
erative analysis and public processes. It incorporates extensive 
public recommendations. As stated in the plan, modernization is 
about more than upgrades to hardware and software. The office is 
at a time where we need to re-envision almost everything we do, 
including how customers register claims, submit deposits, record li- 
censes, file security interests, share royalty information, and utilize 
expert resources. Although it is not the focus of this hearing, many 
policy issues are dependent upon modern IT systems, including im- 
provements to music licensing, orphan works, and small claim solu- 
tions. 

In the current paradigm, modernization will depend upon and be 
subject to IT services from the Library of Congress, but this central 
management of IT resources has never worked well for the copy- 
right community. It has, in my opinion, quite literally disconnected 
the Register’s statutory responsibility to administer the copyright 
law from the tools, technologies, and staffing that are necessary to 
do so. It should be alarming to all of us that under this arrange- 
ment no one in the agency has complete control of or complete ac- 
countability for the authoritative records of copyright ownership 
under U.S. law. 
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IT challenges are difficult to divorce from larger governance 
questions. The Library and the Copyright Office have always had 
important but distinct missions. It does not serve either institution 
to further conflate or entwine them. Such conflation, in fact, is con- 
trary to the original goals of Congress, which in 1897 created the 
Copyright Office for the purpose of separating copyright functions 
from Library functions. These boundaries were important then, but 
they are much more important today. 

My goals for the Copyright Office reflect all of my experience as 
a copyright attorney — some 25 years — and 4 years of public proc- 
esses that I conducted as Register. Our customers should be able 
to transact easily, quickly, from anywhere at any time, using con- 
sumer-friendly platforms, mobile technologies, and modern 
metadata. They should have searchable digital records that provide 
the lifecycle of a copyright interest from creation to public domain 
and a chain of title that supports integration of third-party data. 
These services, performed properly, will fuel any number of innova- 
tive businesses and ensure that both authors and users of intellec- 
tual property receive the benefits and the presumptions of the law. 
This is what copyright administration is about in the 21st century. 

In closing, I want to thank my colleagues at the Library of Con- 
gress and my friend David Mao for engaging on these complex 
issues and I want to thank GAO for sharing its expertise this past 
year. I hope that the Library can support these goals. But over the 
past few years that support has been subservient and it has also 
been hostile at times. Thank you. 

[The statement of Ms. Pallante follows:] 
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Maria A. Pallante 

Register of Copyrights and Director of the United States Copyright Office 


As United States Register of Copyrights, Maria A. Pallante directs the legal, policy, and 
business activities of the United States Copyright Office. The Copyright Office 
administers important provisions of Title 17, including the nation’s copyright registration 
and recordation systems and certain statutory licenses. The Register and her staff lead 
public discussions in the field of copyright law, act as principal advisors to Congress on 
matters of domestic and international copyright policy, and support a variety of 
intellectual property efforts across the U.S. government, including appellate litigation, 
trade negotiations, and treaty implementations. Ms. Pallante assumed her duties on June 
1, 201 1, after serving five months as Acting Register. 

Prior to her appointment in 201 1, Ms. Pallante held two senior positions in the U.S. 
Copyright Office, serving first as Deputy General Counsel (2007-2008) and then as 
Associate Register & Director of Policy and International Affairs (2008-2010). From 
1999-2007, she was Intellectual Property Counsel and Director of Licensing for the 
worldwide Guggenheim Museums, headquartered in New York. She also worked for two 
authors’ organizations in New York, serving first as Assistant Director of the Authors 
Guild, Inc., and then as Executive Director of the National Writers Union, in each case 
working on copyright policy, transactions, litigation, and freedom of expression issues. 
She practiced briefly with the Washington, D.C. law firm and literary agency Lichtman, 
Trister, Singer and Ross, and completed a clerkship in administrative law for the 
appellate division of the U.S. Department of Labor. 

Ms. Pallante is a 1990 graduate of the George Washington University Law School. She 
earned her bachelor’s degree in history from Misericordia University in Pennsylvania, 
where she was also awarded an honorary doctorate of humane letters. 

FOCUS OF TENURE 

Under Ms. Pallante’s leadership, the U.S. Copyright Office commenced a two-year 
evaluative process to address current complexities in the copyright system and to prepare 
the Copyright Office for future challenges. She released the public paper Priorities and 
Special Projects of the United States Copyright Office in October 2011, which identified 
seventeen priorities in policy and administrative practice and ten special projects for the 
Office. Using the Priorities document as a guide, the Copyright Office engaged with 
colleagues and customers across the public and private sectors to discuss a variety of 
issues relating to the quality and efficiency of Copyright Office services and possible 
future directions. Some of these discussions took the form of meetings or public 
roundtables outside the capital city, including in Los Angeles, Silicon Valley, New York, 
and Nashville. The public feedback from this effort will help to define the Office’s long- 
term strategic plan. 
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In March 2013, Ms. Pallante helped initiate a comprehensive congressional review of 
U.S. copyright law, through her Horace S. Manges Lecture, The Next Great Copyright 
Act, presented at Columbia Law School, as well as through subsequent testimony before 
the House Judiciary Committee. In November 20 13, she delivered the Christopher Meyer 
Memorial Lecture at the George Washington University Law School, entitled The Next 
Generation Copyright Office: What it Means and Why it Matters. Other speeches include 
Review and Reflection: Copyright Hearings and Related Discourse in the Nation ’s 
Capital (February 2014); ASCAP at 100 (February 2014); The Curious Case of Copyright 
Formalities (April 2013); and Orphan Works & Mass Digitization: Obstacles & 
Opportunities (April 2012). 

During her tenure, Ms. Pallante released the first comprehensive revision of the 
Compendium of U.S. Copyright Office Practices in more than two decades. She has 
delivered to Congress the following policy studies; Orphan Works and Mass Digitization 
(June 2015); Copyright and the Music Marketplace (February 2015); Resale Royalties: 

An Updated Analysis (December 2013); Copyright Small Claims (September 2013); 
Federal Copyright Protection for Pre-1972 Sound Recordings (December 201 1); Legal 
Issues in Mass Digitization: A Preliminary Analysis and Discussion Document (October 
2011); and Report on Marketplace Alternatives to Replace Statutory Licenses (August 
201 1). Additional studies are planned or pending, including in the area of software in 
everyday products and the making available right. 

Ms. Palltmte has created several new programs to bring additional expertise to the 
Copyright Office. These include the Barbara A. Ringer Copyright Honors Fellowship, a 
distinguished public service clerkship for attorneys in the early stages of their careers, 
and the Abraham L. Kaminstein Scholar in Residence Program, an opportunity for 
leading academics to work at the Copyright Office on mutually beneficial projects. Her 
educational initiatives include the Copyright Matters Lecmre Series, a community forum 
by which industry experts discuss the practical implications of copyright law in the 21st 
century, and the Copyright Academy, an internal program by which staff study a variety 
of complex legal provisions and judicial interpretations. She also created a research 
program for law schools, in which professors design courses and projects around timely 
issues and students receive support and direction throughout the semester from Copyright 
Office experts. 
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statement of Maria A. Pallante 
Register of Copyrights and 
Director of the United States Copyright Office 

Before the 

Committee on House Administration 
United States House of Representatives 
December 2, 2015 

“Improving Customer Service for the Copyright Community; 
Ensuring the Copyright Office and the Library of Congress 
Are Able to Meet the Demands of the Digital Age” 


Chairman Miller, Ranking Member Brady, and Members of the Committee, thank you for inviting 
me to testify today about customer service for the copyright community in the digital age. This 
statement describes the statutory responsibilities of the United States Copyright Office and the 
public discussions and modernization goals that have been the focus of my work as Register. In 
undertaking this work, it has become clear that the Office and the Library of Congress have been 
steadily evolving in separate directions since Congress enacted the 1976 Copyright Act. The Office 
will need changes, and in some instances wholly new paradigms, if it is to meet the dynamic needs 
of the marketplace it is meant to serve. 

Mission of the United States Copyright Office 

The United States Copyright Office has a critical mission within the federal government. It 
administers the nation’s copyright laws for the advancement of the public good; offers services and 
support to authors and users of creative works; and provides expert impartial assistance to Congress, 
the courts, and executive branch agencies on questions of copyright law and policy. Through this 
work, the Office supports a vibrant marketplace of creativity and technological innovation that 
contributes trillions of dollars to the global economy and immeasurable value to society at large. 

Copyright Office officials possess wide-ranging expertise in the Copyright Act, related provisions 
of Title 17, relevant judicial opinions, foreign copyright taws, international copyright treaties, trade 
agreements, and related business transactions, and are essential participants in bilateral and 
multilateral trade negotiations of the United States. Among other statutory duties, the Office 
examines, certifies, and registers copyright interests — including in music, motion pictures, books, 
and software — and publicly records commercial and noncommercial instruments involving the 
scope, term, transfer, and licensing of copyright interests. The Office administers several 
compulsory licenses (including, for example, the collection and distribution of over $300 million in 
royalties in 20 1 5) and provides legal review of royalty rate and distribution proceedings. It is 
responsible for regulations, practices, and educational programs that implement and explain the 
complex provisions and parameters of copyright law for the benefit of the general public, legal 
practitioners, libraries, educators, and a variety of large and small businesses. 



26 


2 


Modernization and Strategic Plan 

It has become clear that both the copyright law and the Copyright Office require updates, and I am 
grateful to lawmakers for reviewing these related goals comprehensively and in tandem. In the past 
few years, the Office has supported the work of Congress by conducting major studies and 
administering public processes about future goals. The entirety of this work is available at 
www.copyright.gov, and much of it is listed in our five-year strategic plan, further discussed below. 
Many policy issues, including improvements to copyright registration, copyright recordation, fee 
schedules, music licensing, orphan works, and small claims solutions, are directly related to, if not 
contingent upon. Office modernization. Our exacting work in these areas is well documented and 
incorporates considerable public input. 

As many have stated, technology is the cornerstone of a modem copyright system and, upon 
becoming Register, 1 made it an immediate priority. Thus, in Priorities and Special Projects of the 
United States Copyright Office October 2011 -October 2013, 1 announced a Technical Upgrades 
project to review potential improvements to Copyright Office operations. The project generated 
transparent feedback from all parts of the copyright community, as documented in the resulting 
February 2015 report. Among other points, the report strongly recommends building a technology 
enterprise solution that is designed for and accountable to the complex needs of the Office — and 
decoupled from central Library of Congress control. 

In 2012, 1 created a Chief Information Officer position on the Register’s management team (filled in 
2013), following recommendations from public interest organizations and copyright customers 
alike. In the past two years, the Copyright Office CIO has engaged robustly with our customers and 
employees, and completed numerous technology assessments and planning efforts. But this is just 
tlie first phase. The Office will need to hire a robust team of technology and data experts to manage 
planning, project management, and maintenance requirements. These experts should not merely be 
assigned or on call from another part of the agency, but rather be integrated into the Office mission 
where they can work side by side with the legal and business teams. 

Just yesterday, the Register’s Office published the final version of the strategic plan, entitled 
Positioning the United States Copyright Office for the Future, 201 6-2020 (attached to this 
testimony for inclusion in the record and available on our website at 

http://copyright.gOv/reports/strategic-plan/sp2016-2020.html). This plan is the result of several 
years of deliberative groundwork and public review that began with the Priorities projects 
mentioned above. As stated in the plan, the Copyright Office is at a point in time where it must re- 
envision almost all of its services, including how customers register claims, submit deposits, record 
documents, share data, and access expert resources, and it requires meeting the diverse needs of 
individual authors, entrepreneurs, the user community, and the general public. 

The strategic plan sets forth six strategic goals: administering U.S. copyright laws effectively, 
efficiently, and skillfully to benefit authors and the public; making copyright records easily 
searchable and widely available; providing impartial expert assistance to Congress, executive 
branch agencies, and the courts; delivering outstanding information services, educational programs, 
authoritative publications, and other expert resources; building a robust and flexible technology 
enterprise dedicated to a modem copyright agency; and recruiting a diverse pool of legal, 
technology, and business experts. In addition, the plan provides dozens of measurable and 
transformative objectives tied directly to the goals of the copyright law, including the development 
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of new web tools, secure tracking and transaction systems, business-to-business prototypes, security 
and privacy measures, and a host of nuanced regulations for emerging or complex areas of 
authorship. 

Implementation of the plan will require significant collaboration with experts in the copyright and 
technology sectors, and, when successful, will result in a Copyright Office that is as dynamic and 
future-focused as the marketplace it supports. The plan anticipates an updated and balanced 
funding strategy that is more appropriately tied to the value of the U.S, copyright system. One way 
to look at this is as follows: the Office is working in an institutional paradigm designed for the 
analog world, roughly the 1970s, and is dependent upon funding strategies from that same era. The 
strategic plan provides a path to leapfrog this trajectory, however, to the benefit of all who rely on 
the copyright system. 

IT Governance and Investments 

As many have noted, although the Register and her staff have primary legal responsibility for 
administering the copyright laws of the United States, officials in the Library of Congress control 
most of the tools necessary to perform this work, including the IT infrastructure and network that 
hosts registration and recordation software and public services. This IT arrangement is outmoded, 
frustrating, and inefficient, and it has provided substandard service to the Cop 5 Tight Office and 
copyright customers. Indeed, the Office has never been granted administrative privileges to the 
operating systems, databases, authentication services, Internet services, security services, storage 
systems, and network services that are fundamental to its work. 

As required by our Strategic Plan, and pursuant to congressional direction, the Copyright Office is 
currently analyzing the specific technology requirements for a modern, dedicated technology 
enterprise, as well as the associated costs. This follow-on work will include appropriate public 
processes regarding a variety of data and cloud-based strategies that will allow the Office to be 
interoperable with, and more responsive to, the copyright and technology businesses that extract, 
leverage, and otherwise rely on copyright information. 

In this technology work, the Copyright Office greatly appreciates, and has learned from, the 
expertise of the Government Accountability Office (GAO). The Office swiftly took steps to 
implement the two recommendations (regarding IT investments and IT planning) in the GAO’s 
March 2015 report. Copyright Office Needs to Develop Plans that Address Technical and 
Organizational Challenges, and will continue to look to GAO as a resource for benchmarks and 
best practices in other areas. Nonetheless, it should be understood that, in the current environment. 
Office modernization is necessarily tied to the Library of Congress’s ability to correct the systemic 
deficiencies identified by GAO in its primaiy audit. Library of Congress: Strong Leadership 
Needed to Address Serious Information Technology Management Weaknesses. Among other issues, 
this audit describes 31 deficits that will necessarily take years to address. 

The questions for the future are what is the promise to Copyright Office customers and why should 
they be satisfied by a renewed commitment to the same central processes that so completely failed? 
To provide one concrete example of the risk involved, this past August, the Office lost registration 
and other online services for nine days due to an extended systems failure following routine 
facilities maintenance in which the Architect of the Capitol powered down the Madison Building. 
These underlying systems are owned and managed solely by Library of Congress staff and vendors. 
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imder Library-managed contracts, and yet they are essential to running online registration (eCO) 
and other Office software applications. 

Once apprised of the outage, the Copyright Office became extremely concerned about the safety 
and integrity of its records. Because there appear to be a number of outstanding questions regarding 
the protocols and protection measures that were (or were not) taken, 1 have pressed the importance 
of a third-party investigation with both the Acting Librarian and the Inspector General. 

Ideally, Copyright Office systems should remain available to customers during routine maintenance 
and testing, meaning that in such a situation the Office should be able to rely upon the Library- 
managed alternate computing facility (ACF) to maintain its operations. In fact, the Office requested 
to “fail over” to the ACF during the planned power shutdown to maintain service to its customers, 
but after investigation, the interim Library of Congress Chief Information Officer discerned that 
security controls were inadequate for copyright administration. 

Whenever the Copyright Office is taken offline, it affects customers around the world. They cannot 
submit registrations, check the status of pending applications, complete business transactions, or 
obtain documents required by courts (other than through burdensome paper processes). But it also 
affects the majority of Office employees, who are unable to access files, process applications, or 
address backlogs, and who must, instead, manage public confusion and anger. In addition to these 
concerns, such an outage inevitably impacts the flow of Office revenue. 

Because copyright records are the statutory responsibility of the Register — ^but the Copyright Office 
does not own or manage the IT infrastructure and network upon which they depend — there is, in 
effect, no one within the agency who has full and sufficient accountability for copyright data in the 
event of a failure. Given the fact that the Office database is the authoritative record of copyright 
ownership under U.S. law, this is an alarming state of affairs. 

Relevant History and Related Issues 

Although IT challenges are a focus of this hearing, they cannot be easily divorced from larger 
governance questions. While there is an historic relationship between the Library of Congress and 
the Copyright Office, their roles are in fact very separate, and it does not serve either institution or 
the public to conflate or entwine them. The Register carries out very specific and complex legal 
duties that serve a variety of important, and sometimes competing, public equities. The work of the 
Office directly affects the legal rights and economic interests of individuals, businesses, and 
members of the public. In this regard, it must also be noted that libraries — including the Library of 
Congress — are active and effective advocates in copyright debates, and they are regular participants 
in the Register’s studies and regulatory proceedings. These developments, largely a consequence of 
the digital revolution, create more — not less — reason to ensure safeguards and separation across 
agency lines. 

It is instructive that when Congress created the Copyright Office in 1897, its overarching goal was 
to separate copyright functions from Library of Congress functions. The outcome pleased 
everyone, including the Librarian, who testified at the time that the volume and complexity of 
copyright matters were a drain on the Library’s core mission. Oddly, the separation of Office 
functions that Congress intended to erect has eroded over time, in inverse proportion to the 
extraordinary growth of the copyright law and expansion of the Register’s statutory duties. 
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This erosion is not without consequences. Today, there are a number of offices in the Library of 
Congress that affect or seek to inform the statutory work of the Register and her relationship with 
the Librarian. These positions exercise significant de facto control over the national copyright 
system by virtue of IT, budget, acquisitions, and staffing authorities. While it may be 
understandable that the Library, with some 3,000 employees, would seek to rely on senior staff to 
manage its various operations, this arrangement has created a number of conflicts — some merely 
frustrating, others serious — involving funding, staff hires, website administration, and, more 
substantively, registration and deposit policies. Certainly, there should be cooperation between 
Copyright Office and Library staff, but the parameters of this work need to be appropriately 
defined. 

During the past two years, some Members of Congress have questioned, more directly, the 
nineteenth century organizational structure that is at the heart of the Library of Congress-Copyright 
Office relationship. Under this structure, the Librarian appoints the Register and provides general 
supervision over Office affairs, but recent judicial precedent has held that the Librarian of Congress 
is accountable to the executive branch when it comes to copyright functions. To the extent this fact 
would threaten the impartial and nonpartisan tradition of the Register’s position, a recent draft 
House Judiciary bill would, among other things, ensure that the Register remains freely and 
independently available to Congress. At the same time. Members and stakeholders have suggested 
that the nation’s leading copyright official should be appointed by the President and confirmed by 
the Senate, bringing the Register’s position into alignment with other intellectual property posts and 
providing for a more modem chain of accountability. The Office appreciates and is respectful of 
these deliberations. 

In closing, I want to underscore that copyright law is chasing an exponential increase in the way 
people'create, distribute, and consume copyrighted works. As part of this new world order, 
customers should be able to transact easily and quickly with the Copyright Office, from anywhere 
and anytime, using consumer-friendly platforms, mobile technologies, and modem data paradigms. 
This is a fast-paced, results-driven focus for a government agency, but based on all of my 
experience I am convinced it is the right one. 

Thank you for your interest and support on these issues and for inviting me to testify today . 
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The Chairman. Thank you very much. 

The Chair now recognizes Mr. Willemssen for his testimony. 

STATEMENT OF JOEL C. WILLEMSSEN 

Mr. Willemssen. Thank you, Chairman Miller, Ranking Member 
Brady, Members of the Committee. Thank you for inviting us to 
testify today. As requested, I will summarize our statement on our 
reports issued earlier this year on IT issues at the Library of Con- 
gress and at the Copyright Office. 

Regarding the Library of Congress, our March report identified 
weaknesses in numerous IT management-related areas. Examples 
of these were, one, not having an IT strategic plan detailing how 
the Library intended to address future goals and strategies, which 
was especially important given that information is increasingly 
being created, shared, and preserved in digital formats. 

Two, the Library had a highly inaccurate and inconsistent inven- 
tory of its information technology assets. 

Three, the Library did not know how much it was spending on 
IT. In the absence of such information, GAO conducted work to es- 
timate expenditures and determined that the Library had at least 
$119 million in IT obligations for fiscal year 2014. 

Four, the Library was not effectively overseeing its investments 
in IT and its acquisitions were not always guided by well-developed 
risk management, and cost and schedule estimating approaches. 

Five, deficiencies in information security and privacy practices 
and associated technical controls placed systems and data at risk 
of unauthorized access, modification, or loss. 

Six, the Library’s central IT office did not provide services that 
satisfied the other operating units. Accordingly, these other units 
often considered other options for addressing their IT needs. 

A key factor contributing to these and other weaknesses was that 
the Library lacked a Chief Information Officer with clear responsi- 
bility and adequate authority. Subsequent to our report being 
issued, the Library appointed a Chief Information Officer. How- 
ever, it remains to be seen whether this position will have clear re- 
sponsibility and adequate authority to drive needed improvements. 

Overall, the Library generally concurred with our 31 rec- 
ommendations intended to provide a sound foundation for improv- 
ing the management of IT. Further, the Library has initiated a 
range of actions to address the recommendations. However, none of 
the 31 has been fully implemented yet. 

Looking forward, the Library needs to commit to milestones for 
implementing our recommendations and focus on meeting those 
milestones in order to make progress in improving its IT manage- 
ment. 

Turning to the Copyright Office, our March report identified a 
number of IT challenges, particularly with regard to the Electronic 
Copyright Office system, or eCO, which is used for, among other 
things, the registration of copyrights. These challenges included 
numerous user complaints about the performance and usability of 
the eCO system. 

We also reported that the Copyright Office had proposed invest- 
ments in several IT improvement projects, but had not yet devel- 
oped an IT strategic plan to guide its efforts. We noted that the of- 
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fice had been hindered in developing long-term plans due to the ab- 
sence of such plans for the Library as a whole. In addition, dis- 
satisfaction with IT services provided by the Library led Copyright 
to pursue its own IT activities. 

Since GAO’s review, Copyright has issued an overall strategic 
plan that, among other things, describes goals and objectives for 
improving its IT environment. Going forward. Copyright will need 
to follow through on its intentions to develop a more detailed IT 
plan that will include specific strategies, costs, and time lines. Such 
an approach, if implemented effectively, can lay the groundwork for 
modernization of systems critical to its mission. 

That concludes the summary of my statement. I look forward to 
your questions. 

[The statement of Mr. Willemssen follows:] 
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Joel C. Willemssen 


Mr. Willemssen is the Managing Director of Information Technology Issues at the U.S. 
Government Accountability Office. In this position, he has overall responsibility for GAO’s 
evaluations of information technology across the federal government. Specific responsibilities 
include government-wide and agency-specific assessments of computer security and critical 
infrastructure protection; electronic government; information collection, use, and dissemination; 
privacy; system and software development and acquisition; system operation and maintenance; 
enterprise architectures; technology investment management; and telecommunications. 


Since joining GAO in 1979, Mr. Willemssen has led numerous reviews of information 
technology systems and management at a wide array of federal agencies. He frequently testifies 
on information technology issues before congressional committees, appearing as a GAO witness 
on more than 100 occasions. 


Mr. Willemssen received bachelor’s and master’s degrees in business administration from the 
University of Iowa. 
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What GAO Found 

in a March 2015 repoit, GAO identified widespread weaknesses in the Library of 
Congress's management of its information technology (IT) resources. These 
weaknesses spanned six IT management-related areas: 

• Strategic planning: The Library had not developed an IT strategic plan that 
defined what it wants to accomplish with IT and strategies for achieving those 
results. Such a strategic approach is essentia! to the Library as information is 
increasingly created, shared, and preserved digitally. 

• investment management; The Library had not effectively implemented 
processes for selecting or overseeing its investments in IT. in addition, it did 
not have an accurate inventory of its IT assets and did not know how much it 
was spending on IT. 

• Acquisition management; The Library had not fully implemented processes 
for ensuring that its IT acquisitions were guided by well-developed 
requirements, risk management practices, and reliable cost and schedule 
elements. 

• Information security: Weaknesses in its information security and privacy 
programs, as well as weaknesses in technical security controls, placed the 
Library’s systems at risk of unauthorized access, modification, or loss. 

• Service management: The Library's central IT office did not provide 
services that satisfied the other units in the organization, leading to those 
units engaging in overlapping and duplicative activities and purchases. 

• Leadership: The Library’s lack of a chief information officer with adequate 
authority and clear responsibility for managing the agency’s IT was a key 
contributing factor to the weaknesses GAO identified. 

Since GAO issued its report, the Library has taken actions toward addressing 
these weaknesses; however, much more remains to be done. For example, it 
appointed a new chief information officer, but it remains to be seen whether this 
official will have clear responsibility and adequate authority to drive needed 
improvements. 

Regarding the Copyright Office, GAO reported in March 2015 that the office’s IT 
environment was to support its duties of receiving and examining copyright 
registration applications, maintaining deposited copies of copyrighted works, 
producing certificates of registration, and maintaining records of the transfer of 
copyright ownership. However, the office faced a number of IT chalienges, 
particularly with regard to its Electronic Copyright Office system, which supports 
the registration of copyrights. These chalienges included user complaints about 
the performance and usability of the system, information security weaknesses, 
and data retention and integrity issues, among other things. The Copyright Office 
was also hindered by inadequate IT services and support from the Library. 

VWiiie the office had proposed investments in several IT improvement projects, it 
had not developed an IT strategic plan to guide its efforts and monitor progress in 
meeting its goals. Since GAO’s review, the Copyright Office has issued an 
overall draft sb-ategic plan that, among other things, describes goals and 
strategies for improving Its IT environment. 
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GOVERNMENT ACCOUNTABILITY OFFICE 


Chairman Miller, Ranking Merhber Brady, and Members of the 
Committee: 

Thank you for inviting me to testify at today's hearing on ensuring the 
Copyright Office and Library of Congress are able to meet the demands 
of the digital age. As you know, the Library of Congress Is the United 
States’ oldest federal cultural institution, and its mission is to support the 
Congress in fulfilling its constitutional duties and to further the progress of 
knowledge and creativity for the benefit of the American people. In 
addition, since the late 19th century it has housed the U.S. Copyright 
Office, which is responsible for administering the nation’s copyright 
system. 

As technology has advanced and the needs of its users have evolved, the 
Library has come to rely increasingly on information technology (!T) 
systems to carry out its mission. Moreover, as we and others have 
highlighted in a number of reports, the Library has long faced challenges 
in effectively managing and modernizing its IT environment.^ in addition, 
the Register of Copyrights has discussed the need for a modernized 
Copyright Office, to include upgrades to its current IT environment. 

In my statement today, ! will summarize the results and recommendations 
from two reports we issued earlier this year on the Library’s management 
of the IT supporting its programs and operations and the Copyright 
Office’s IT environment and plans for modernization.^ In preparing this 
statement, we relied on the work supporting these reports, as well as 
interviews conducted in November 2015 with Library and Copyright 
officials to discuss efforts they had undertaken to implement our 


^GAO, Management Review of the Library of Congress (Washington, D.C.; May 7. 1996), 
available online at http://www.gao.gov/products/156761 (vol. 1) and 
http;//www-gao- gov/products/1 56762 (vol. 2). Also see National Academy of Sciences, 
LC21: A Digital Strategy for the Ubrary of Congress (Washington, D.C,: National Academy 
Press. 2000),The Library’s Office of the Inspector General has also issued a number of 
reports on IT challenges at the agency 

^GAO, Library of Congress: Strong Leadership Needed to Address Serious Information 
Technology Management Weaknesses. GAO-15-315 (Washington, D.C.: Mar. 31. 2015), 
and Information Technology: Copyright Office Needs to Develop Plans that Address 
Technical and Organizational Challenges. GAO-15-338 (Washington, D.C.; Mar, 31, 

2015). 
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recommendations. We also reviewed documentation provided by officials 
on these efforts. 

The work on which this testimony is based was conducted in accordance 
with generally accepted government auditing standards. Those standards 
require that vje plan and perform the audit to obtain sufficient, appropriate 
evidence to provide a reasonable basis for our findings and conclusions 
based on our audit objecfives. We believe that the evidence obtained 
provides a reasonable basis for our findings and conclusions based on 
our audit objectives. The reports discussed in this statement each contain 
a more detailed overview of the scope and methodology of the work we 
performed to conduct our reviews. 


Background 


Established in 1800. the Library of Congress is the world's largest library 
and serves as the research arm of Congress. Its collections include more 
than 36 million books and other print materials, 3.5 million recordings, 

13.7 million photographs. 5.5 million maps, 6.7 million pieces of sheet 
music, and 69 million manuscripts. The items in its collection are received 
through a variety of sources, including through the copyright registration 
process administered by the U.S. Copyright Office. 

Positioned within the legislative branch, the Library carries out its 
operations through a number of service and support units: 

• The Office of the Librarian had overall management responsibility for 
the Library and carried out certain executive functions.® 

• The Congressional Research Service (CRS) is responsible for 
providing Congress with nonpartisan legislative research and 
analysis. 

• The U.S. Copyright Office is responsible for administering the 
Copyright Act, including copyright registration, recordation, mandatory 
deposit, and certain statutory licenses. 


®Since the conclusion of our review, the Library announced that it had established new 
offices, induding the Office of tie Chief of Staff and the Office of the Chief Operating 
Officer, as well as a new service unit: National and International Outreach. These offices 
and service unit have subsumed the executive functions formerly belonging to the Office 
of the Librarian. 
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• The Law Library provides Congress with ready access to reliable legal 
materials. 

• Library Services develops and preserves the Library’s collections and 
also Included the National Library Service for the Blind and Physically 
Handicapped (NLS). which directs the production of books and 
magazines in Braille and recorded formats.'* 

• At the time of our review, the Office of Strategic Initiatives was 
responsible for the overall digital strategic planning for the Library and 
included the office of Information Technology Services (ITS), which 
was to support the Library’s IT systems and infrastructure.® The head 
of the Office of Strategic Initiatives also served as the agency’s Chief 
Information Officer. 

• The Office of Support Operations was to provide essential 
infrastructure services to the entire Library. 


IT Environment at the 
Library and Copyright 
Office 


Like other federal agencies, the Library relies on a host of IT systems to 
carry out its mission. These include standard hardware (e.g., desktop and 
laptop computers, printers, and servers) and software (e.g., e-mail, word 
processing and spreadsheet programs, and Internet resources), as well 
as administrative and business systems, such as accounting, financial 
planning and budgeting, and human resources systems. 

In addition, the Library’s service units use systems that support their 
specific missions. For example, NLS uses a system to manage the 
production, distribution, and maintenance of audiobooks, and CRS uses 
specialized software to develop its reports. 

At the time of our review, much of the responsibility for managing the 
Library’s IT rested with the Office of Strategic Initiatives. More specifically. 


'‘Since we concluded our review. NLS was moved from Library Services to Nationa! and 
International Outreach, a new service unit that was established as part of an internal 
Library reorganization. 

®Since the time of our review, the Office of the Chief Operating Officer has subsumed the 
functions fotmerly belonging to the Office of Strategic Initiatives, including the office of 
Information Technology Servi(»s, as well as those of the Office of Support Operations. 
Under this reorganization, the Library's Chief Information Officer reports to the Chief 
Operating Officer. 
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ITS, a component of the office, was responsible for supporting the other 
service units by planning, designing, developing, and maintaining 
systems and their supporting infrastructure. 

As of September 2014, the Library had at least 380 staff across the 
various service units dedicated to IT functions, in addition, it obligated at 
least $1 19 million for IT during fiscal year 2014, with about $46 million for 
staff salaries and $73 million for goods and services, among other things. 
The Office of Strategic Initiatives accounted for about $72 million of the 
total IT obligations across the agency, with the rest allocated to the other 
service units, who also make their own investments in IT. 

The Copyright Office also relies extensively on IT to carry out Its mission. 
It uses multiple systems to support its registration, recordation, and 
licensing functions. In particular, the office's Electronic Copyright Office 
(eCO) system Is used by members of the public (e.g., authors) to register 
claims to a copyright and by Copyright Office staff to manage this 
process. 


Weaknesses in IT 
Management across 
the Library 
Demonstrate the 
Need for Stronger 
Leadership 


In March 2015, we reported that the Library had serious weaknesses in 
the management of IT across the organization.® Specifically, the Library's 
policies, procedures, and implementation in six IT management-related 
areas had significant weaknesses. These six areas were (1) strategic 
planning, (2) investment management, (3) acquisition, (4) information 
security and privacy, (5) service management, and (6) leadership of the 
Chief Information Officer (CIO) and other key officials. 


Library Lacked Tools for 
Effective IT Strategic 
Planning 


strategic planning is essential for an organization to define what it seeks 
to accomplish, identify strategies to efficiently achieve results, and guide 
its efforts. For IT, key elements are an IT strategic plan and an enterprise 
architecture that, together, outline the agency's IT goals, measures, and 


'GAO-15-315. 
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timelines/ In addition, effective human capital management is critical to 
ensuring that an organization’s IT workforce has the necessary skills to 
support its goals.® 

However, as we reported, the Library had not developed an IT strategic 
plan that was aligned with the agency’s overall strategic plan and 
included results-orlented goals and measures, strategies for achieving its 
goals, and descriptions of how projects fit together to support these goals. 
Specifically, the Library had drafted an IT strategic plan that addressed 
some, but not all, of these elements, but at the time of our review it had 
not been finalized. Thus, the Library lacked a clear vision of what it wants 
to accomplish with IT and strategies for achieving those results. Such a 
strategic approach is essential to the Library as information is increasingly 
created, shared, and preserved digitally. 

Regarding enterprise architecture, the Library had developed an 
architecture that described the current state of the Library’s IT systems 
and operations; however, the data supporting this effort were not 
gathered from management and validated by stakeholders, calling into 
question its reliability. Moreover, the architecture did not reflect the target 
state of the agency’s IT, the gaps between the current and target states, 
and specific steps the Library should take to move toward the target state. 

The Library also fell short in its approach to IT human capital 
management. Specifically, it had not assessed the gaps between the 
current skills of its workforce and those that would be needed in the 
future, and developed strategies to fill those gaps. While individual 


^As ws have previously reported, a well-defined IT strategic planning process helps 
ensure that an agency's IT goals are aligned v^th its strategic goals; see GAO, Social 
Security Administration: Improved Planning and Performance Measures Are Needed to 
Help Ensure Successful Technology Modernization, GAO-12-495 (Washington, D C.: Apr. 
26, 2012). Similarly, enterprise architecture is an important tool to help guide an 
organization toward achieving the goals and objectives of its strategic plan. See GAO. 
Organizational Transformation: A Framework for Assessing and Improving Enterprise 
Architecture Management (Version 2.0} (Supersedes GAO-03'584Gj, GAO-10-846G 
(Washington, D.C.: August 2010). 

®Practices for effective human capital management have been identified by both the Office 
of Personnel Management and GAO. See Office of Personnel Management, The Human 
Capital Assessment and Accountability Framework-Systems. Standards, and Metrics 
(https;//www.opm.gov/policy-data-overeight/human-capital-management/#urt=Framework) 
and GAO, Human Capital: Key Principles for Effective Strategic Workforce Planning, 
GAO-04-39 (Washington, D.C.; Dec. 11. 2003). 
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service units had undertaken their own skills gap analyses, the Library 
lacked an organization-wide perspective that would allow it to take a 
strategic approach to ensuring an adequate IT workforce. 


Recognized practices for managing the selection and oversight of IT 
Investments, such as those outlined in our IT investment management 
framework,® are critical to ensuring that an organization is prudently 
investing in the right mix of projects to support its mission. These 
practices include (1) instituting a board for making investment decisions, 
(2) selecting investments that meet business needs, (3) providing 
investment oversight, and (4) capturing accurate and comprehensive 
information on those investments and other IT assets. 

The Library had instituted an investment review board and established 
elements of a process for selecting investments; however, these were not 
always effective. Specifically, Library policy did not clearly define the 
responsibilities of its investment board by, for example, specifying when 
investment decisions should be made by the board and when they should 
be elevated to the Library’s Executive Committee. Further, since the 
Library did not have a fully developed IT strategic plan or enterprise 
architecture, its investment management process was not fully 
coordinated with these processes, limiting the agency’s ability to make 
investment decisions that effectively support its mission and goals. 

In addition, while the Library had developed a process for selecting 
investments for funding based on a balancing of risk factors and program 
benefits, it lacked policies or procedures for “re-selecting" Investments for 
continued funding once they were operational. This Is significant because 
operational investments accounted for the majority of the Library’s IT 
spending. Moreover, the Library had not integrated its investment 
selection and funding processes, meaning that decisions to fund projects 
were not informed by the evaluation of their relative risks and benefits. In 
some cases, individual service units secured funding for investments 
before bringing them to the investment review board— or the investments 
were not reviewed by the board at all. 


Selection and Oversight of 
Investments Was Not 
Effective 


®GAO. Information Technology Investment Management: A Framework for Assessing and 
Improving Process Maturity (Supersedes AIMD-10. 1.23), GAO-04-394G (Washington, 
O.C.: March 2004). 
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Regarding investment oversight, the Library conducted assessments of 
investments’ progress through reviews of variations from planned cost 
and schedule baselines and the management of risk, among other things. 
However, for three selected investments we reviewed, cost, schedule, 
and risk data were not always complete or reliable. This limited the 
Library’s awareness of potential problems and its ability to take corrective 
action. 

Further, the Library had not fully accounted for its IT-relafed expenditures 
but only collected that information for the subset of investments reviewed 
by the investment review board. Consequently, the Library did not know 
how much it spends on IT. 

Similarly, the Library’s primary inventory of IT assets (e.g., hardware such 
as personal computers) was highly inaccurate. For example, the inventory 
listed over 18,000 active personal computers, even though officials told 
us that fewer than 6,500 personal computers were actually in use. Also, 
the Library had conflicting inventories of information systems, which 
disagreed on the number of systems in the agency. Specifically, Library 
officials provided us with two lists of systems, one with 30 systems and 
one with 46. After we raised this discrepancy, we were provided with a 
revised list of 70 systems. In the absence of an accurate inventory, the 
Library may be unable to effectively prevent loss or theft of assets, and it 
may end up purchasing equipment that is duplicative of what it already 
has on hand. 


Key Acquisition Practices Proper implementation of key IT acquisition practices can significantly 

Were Not Followed increase the likelihood of delivering promised system capabilities on time 

and within budget. These practices include, among others, risk 
management, requirements development, cost estimating, and 
scheduling. 

However, the Library had not developed organization-wide policies in any 
of these areas that fully address key practices. Partly as a result, these 
practices were not fully implemented for selected investments we 
reviewed. For example: 

• Selected IT investments did not take such risk management 
measures as establishing a risk management strategy; evaluating, 
categorizing, and prioritizing risks; and developing risk mitigation 
strategies. 
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• Investments did not effectively manage requirements by eliciting 
stakeholder needs and prioritizing customer requirements. 

• Cost estimates for selected investments did not sufficiently account 
for ail a)sts. which is a foundational requirement for a reliable cost 
estimate. 

• Schedules for the selected investments were not fully reliable 
because they did not logically sequence planned activities to provide 
straightforward paths of critical activities. 

Without establishing and implementing these key acquisition practices, 
investments may incur cost overruns and schedule slippages and fail to 
deliver capabilities needed to support the Library’s mission. 


Security and Privacy 
Weaknesses Threatened 
Library Information and 
Systems 


Consistent with NIST guidance, the Library had established security and 
privacy programs by delineating roles and responsibilities and developing 
policies and procedures. For example, it assigned security-related roles to 
appropriate officials, including the Librarian. Deputy Librarian, CIO, and 
Chief Information Security Officer. The Library also documented 
Information security policies and procedures to safeguard its information 
and systems. Similarly, the Library developed policies to protect the 
privacy of data processed by its systems and designated the General 
Counsel as the agency’s Chief Privacy Officer, with responsibility for 
managing the protection of personally identifiable information maintained 
by Library systems.’® 


Protecting its data and information systems Is essential both to defend an 
agency's assets against cyber attacks and to protect sensitive information 
entrusted to It by the public, To do this, agencies should establish 
information security and privacy programs and effectively implement 
technical security and privacy controls, such as those outlined by the 
National Institute of Standards and Technology (NIST). 


’®Personally identifiable information — or PH— is any information that can be used to 
distinguish or trace an individual’s identity, such as name, date and place of birth, or 
Social Sewjrity number, or other types of personal information that can be linked to an 
individual, such as medical, educational, financial, and employment information. 
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However, the Library had not fuiiy implemented key elements of its 
information security and privacy programs. For example, while the Library 
did establish and implement a process for reporting and responding to 
security incidents, it had not always 

• developed a complete and accurate inventory of systems that would 
allow it to ensure that appropriate security controls had been applied; 

• documented key controls In system security plans to inform officials 
about the security risks involved in operating those systems; 

• conducted complete and effective security testing of its systems to 
ensure tfiat controls were implemented and operating as intended; 

• developed remedial action plans for identified security weaknesses 
and taken timely action to complete those it did develop; 

• ensured that all systems had been appropriately reviewed and 
authorized to operate, increasing the risk that officials may not be 
aware of system security risks; 

• ensured that all required users completed security awareness training; 

• included appropriate security-related provisions in contracts for IT 
products and services; and 

• fully assessed risks to privacy arising from the use of selected 
systems. 

In addition to these program shortcomings, we also identified weaknesses 
in the Implementation of technical security controls for nine selected 
systems. These Included controls related to preventing unauthorized 
access, authorization, configuration management, boundary protection, 
patch management, and physical security. These weaknesses limited the 
effectiveness of security controls and placed sensitive information at risk 
of unauthorized disclosure, modification, or loss.” 


June 2015 we issued a separate report with limited distribution that described in 
greater detail the technical control weaknesses identified during our review, along with 74 
recommended actions to mitigate them. 
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Recognized best practices cal! for ensuring that an organization's IT 
services are aligned with and support its business needs, These include 
(1) developing a catalog of all current IT services delivered by the service 
provider to its customers and (2) establishing service-level agreements 
between the provider and customer to describe the services, specify the 
responsibilities of both parties, and document expected levels of service. 

As mentioned previously, at the time of our review, the Library’s office of 
Information Technology Services (ITS) was the central IT organization in 
the agency and was responsible for providing an array of IT services to 
other units within the Library. To Its credit, ITS developed a service 
catalog that captured its current IT services, which included, for example, 
service desks, backup and recovery, and network services. However, ITS 
did not establish service-level agreements that covered all the services it 
provided to other units, or establish targets for expected levels of service. 
This increased the risk that the office would not provide services that 
meet the needs of other units in the Library, and in turn that IT would not 
effectively support the overall mission of the organization. 

While ITS had undertaken some ad hoc efforts to improve the satisfaction 
of users throughout the Library, they were largely unsuccessful and were 
not guided by a documented plan that prioritized improvement projects 
and identified needed resources, schedules, and measurable outcomes. 

Reflecting these weaknesses, a survey we conducted of the various 
service units showed that customers of the Library’s IT services were 
generally not satisfied. Respondents cited a number of factors that 
contributed to their dissatisfaction, including a lack of transparency, poor 
service quality, inconsistent implementation of IT management 
processes, inconsistent communication, and use of outdated technology. 

This dissatisfaction, along with the lack of an enterprise-wide approach to 
managing IT, had contributed to other units within the Library performing 
duplicative or overlapping activities. For example: 

• Multiple service units maintained their own service desks. 

• Service units conducted their own IT human capital assessments. 

• Several units independently purchased similar IT assets, such as 
desktop or laptop computers, network devices, and server and 
desktop software. 


IT Services Were Not 
Supporting Organizational 
Needs 
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• One service unit purchased 82 24-inch computer monitors even 
though ITS had already purchased 100 similar monitors. 

• Service units independently managed their servers, networks, and 
websites- 

Without more concerted efforts to improve the satisfaction of users of the 
Library's IT services, as well as reviewing the costs and benefits of 
overlapping or duplicative activities, the agency lacked assurance that it 
was cost-effectiveiy using IT to support its mission. 


A Lack of Strong 
Leadership Contributed to 
IT Management 
Weaknesses 


As our research and experience at federal agencies have shown, 
agencies need a CIO with responsibility for managing their IT and clearly 
defined responsibilities between the CIO and officials responsible for IT 
management at component organizations. In addition, we have reported 
that CIOs and other former agency IT executives believed that it was 
necessary for a CIO to stay in otfice for 3 to 5 years to be effective and 5 
to 7 years to implement major change initiatives. 


However, many of the IT management weaknesses we Identified at the 
Library stemmed from a lack of strong, sustained leadership. Specifically, 
the agency's CIO did not have adequate responsibility for the agency’s IT, 
including authority over commodity IT’^ and oversight of investments In 
mission-specific systems made by the service units, in addition, five 
different people had filled the CIO position temporarily since 2012. The 
absence of strong, sustained leadership hampered the Library’s ability to 
make needed Improvements in the face of long-standing IT management 
challenges. 

Since our report was Issued, the Library appointed a new permanent CIO 
in September 2015. and this official heads a reorganized office that 
reports to the newly appointed Chief Operating Officer. 


^^GAO, Federal Chief Information Officers: Responsibilities, Reporting Relationships, 
Tenure, and Challenges, GAO-04-823 (Washington. D.C,: July 21, 2004), 

’^As defined by the Office of Management and Budget, commodity IT includes services 
such as IT infrasfi-ucture (e g., data centers, networks, desktop computers, and mobile 
devices): entenprise IT systems (e.g., e-mail, collaboration tools, access management, 
security, and web infrastructure); and business systems (e.g, , finance, human resources, 
and oOier administrative functions). 
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Copyright Office 
Needs to Develop 
Plans for Addressing 
Long-Term IT Needs 


In our March 2015 report on the Copyright Office, we noted that it had 
been reacting to short-term needs, such as retiring legacy systems, but 
needed to develop concrete plans and strategies for how IT would 
support its mission and business needs in the longer term.’** The 
Copyright Office’s mission requirements, including its use of IT, are driven 
by its role as the administrator of the nation’s copyright law. Specifically, 
the office is required by law to, among other things, receive and examine 
copyright registration applications, collect and maintain deposited copies 
of copyrighted works, produce certificates of registration and certified 
copies of applications, and maintain records of the transfer of copyright 
ownership. 


These responsibilities drive the office’s use of IT to facilitate, for example, 
the electronic registration of works, examination of copyright registrations, 
and recording transfers of copyright. In particular, the Copyright Office 
relies heavily on its eCO system to support the registration process. This 
system provides a public interface for submitting applications as well as a 
back-end system for Copyright staff to process these applications. V\^ile 
the office relies on other legacy systems to support its recordation and 
licensing functions, Copyright staff told us that the office plans to 
consolidate functionality from all registration and recordation systems into 
eCO. 


However. eCO has had significant technical issues, both with the system 
Itself, which is managed by the Copyright Office, and its underlying 
Infrastructure managed by the Library. Both internal and external users 
have highlighted challenges in using the system, as well as with the 
office's broader technical environment. These included the following: 

• Performance and usability: Both internal and external users 
described challenges with eCO’s performance and usability. These 
included the system freezing up multiple times daily and an Interface 
that requires users to enter the same data multiple times. In an online 
survey by the office, one eCO user described the system as "hands 
down, the worst site I have ever had to navigate.” 

• Security: Consistent with our findings across the Library, as of 
February 2015, the Copyright Office did not have complete security 


^‘’GAO-15-338. 
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documentation for eCO, including complete security testing, a current 
authorization to operate, and a privacy impact assessment. 

• Data Integrity: Both the Copyright Oifice and the Library’s ITS had 
identified issues with the integrity of data in the eCO system. For 
example, eCO was not properly saving registration certificates, and 
the office’s General Counsel stated that it does not have a means of 
verifying the integrity of files maintained in its systems. 

• Data availability and retention: A service-level agreement had not 
been established between the Copyright Office and ITS for the office’s 
legal responsibility to retain unpublished works (including digital 
works) for up to 120 years. Maintaining access to these files for that 
long will require migration to new storage solutions as technology 
evolves. 

In addition to these technical challenges, the Copyright Office faced 
organizational challenges related to the IT management weaknesses at 
the Library (as highlighted in our report and discussed above). For 
example, the lack of clearly defined roles and responsibilities among the 
Library CIO and the service units had impeded the Copyright Office’s 
ability to meet its IT needs, In addition, the office had been hindered in 
developing Its own IT strategic plan and other long-term plans due to the 
absence of such plans for the Library as a whole. Further, inconsistent 
service management had resulted in dissatisfaction at Copyright with IT 
services provided by the Library, which led the office to pursue IT 
activities on its own. As mentioned above, ITS did not always establish 
levels of expected services it provides to other units in the Library, and 
this has resulted in services that do not meet business needs. For 
example, according to the Copyright Office CIO, ITS controls when eCO 
is to be shut down for maintenance, and these scheduled outages had, at 
times, occurred during periods of heavy traffic from the office’s external 
users. 


Copyright Office Had Not 
Developed Plans for 
Improving Its IT 
Environment 


Although the Copyright Office acknowledged many of the organizational 
and technical challenges we identified, it had not yet developed adequate 
plans to improve its IT environment. Specifically, while the office had 
identified several proposed initiatives for making Improvements and 
requested over $7 million to fund them, it had not developed plans and 
proposals to justify those investments. 


The office’s proposed Improvement projects included the following; 
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• Reengineering the recordation process from an IT, legal, and 
administrative perspective and ultimately developing on online filing 
system. 

• Developing a secure digital repository for works that are registered 
and electronically deposited with the office for protection. 

• Creating a software development environment for future copyright- 
speciftc applications. 

• Developing a data strategy, plan, model, and standards for managing 
the office’s records. 

In addition, the office had researched needed technical upgrades to its 
electronic registration process and identified four areas in greatest need 
of improvement. These were (1) challenges with the current user 
experience. (2) challenges with access to and usability of copyright 
records. (3) inefficiencies with current copyright data, and (4) poor 
performance of outdated IT architecture. The research also resulted in 
proposed recommendations for improvements in these areas. 

These activities notwithstanding, the Copyright Office did not develop 
plans to justify and provide direction for its investments, as called for by 
leading practices. Specifically, while the office developed funding 
requests for its improvement projects, they did not include key information 
such as 3-year cost estimates, the business needs driving the 
investments, how the investments aligned with the agency’s strategic 
plan, or expected funding sources. 

We also reported that the Copyright Office had not developed an IT 
strategic plan, including goals, measures, and timelines, to guide its IT 
improvement efforts and monitor progress in meeting its goals. This effort 
was hindered by the fact that the Library itself did not have an up-to-date 
IT strategic plan, and we noted that developing such a plan, aligned with 
the Library’s future efforts, would help ensure the office's current and 
future investments would support its mission needs and avoid duplication 
with existing activities within the Library. 
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!n October 2015, the Copyright Office released a draft overall strategic 
plan for fiscal years 2016 ttirough 2020.’® The plan included six strategic 
goals and strategies to achieve those goals, including strategies involving 
IT. For example, strategies for achieving the goal of build a robust and 
flexible technology enterprise that is dedicated to the current and future 
needs of a modem copyright agency Included employing sound policies 
for the acquisition and management of technology investments. 
Furthermore, the strategic plan noted that the Copyright Office is 
developing a detailed IT plan with the assistance of a consulting firm and 
will seek public comments on specific strategies, costs, and timelines for 
its technology objectives. 


Implementing GAO’s 
Recommendations Is 
Crucial to Improving 
IT Management 


In our reports we made a number of recommendations to the Library of 
Congress and the Copyright Office aimed at improving the management 
of their IT resources. 

For the Library, we recommended that the Librarian take a number of 
actions to address weaknesses in the six IT management areas, to 
include the following; 


• Expeditiously hire a permanent CIO responsible for managing the 
Library’s IT and ensure this official has clearly defined responsibilities 
and adequate authority, including (1) responsibility for commodity IT. 
(2) oversight of mission-specific systems, and (3) clearly defined 
responsibilities and authorities between the Library CIO and service 
unit IT leadership. This can help provide stable, consistent, and 
effective leadership for addressing the weaknesses we Identified and 
improve the management of IT at the Library. 

• Complete an IT strategic plan that addresses key elements, develop a 
complete and reliable enterprise architecture, and complete an 
assessment of IT human capital needs. 

• Take steps to improve the Library’s investment management process, 
including clarifying the responsibilities of the investment review board, 
improving the investment selection process, improving the investment 


’^Copyright Office. Strategic Ptan 2016-2020 Public Draft, Positioning the United States 
Copyright Office for the Future. The Copyright Office intended to finalize the plan in 
December 2015, following a period of public comment. 
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oversight process, and ensuring complete and accurate data on IT 
investments and assets. 

• Address weaknesses in the Library’s !T acquisition efforts by 
establishing and Implementing organization-wide policies for risk 
management, requirements development, cost estimation, and 
schedule estimation. 

• Take steps to address weaknesses identified in the Library’s 
information security and privacy programs, Including its systems 
inventory, system security plans, security testing, remedial action 
plans, authorization process, contingency planning, security 
awareness training, contract management, and privacy impact 
assessments.’® 

• Improve the management of IT services by ensuring that service-level 
agreements appropriately cover all services and include service-level 
targets, documenting and executing a plan for improving satisfaction 
with IT services, and assessing the costs and benefits of consolidating 
potentially duplicative or overlapping IT activities across the 
organization. 

In its comments on a draft of our report, the Library generally concurred 
with our recommendations, described ongoing and planned actions to 
address them, and provided milestones for completing these actions. For 
example, the Library stated that by September 2015 it would complete a 
skills assessment of IT staff throughout the Library, ensure its inventory of 
IT assets is up to date, and require appropriate service-level agreements 
between ITS and Library service units. 

In November 2015, we discussed the implementation status of the 
recommendations with the newly appointed Library CIO, and he stated 
that the Library had taken steps toward addressing them. For example, 
the CIO released an IT strategy for fiscal year 2016 to provide guidance 
while the Library’s IT strategic plan is being developed. Additionally, the 
CIO and Chief Financial Officer issued a memo requiring service units to 
track IT spending in the Library’s financial accounting system. Further, 


our limited-distribution June 2015 report on the Library’s implementation of 
infoimation security controls, we also made a number of recommendations aimed at 
remediating weaknesses we obsen/ed. 
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according to the acting Deputy CIO, the Library has completed an 
inventory of Its IT hardware. 

These efforts notwithstanding, as of November 2015, the Library has yet 
to fully implement any of our 31 recommendations, including those that 
were to be completed by the end of fiscal year 2015. For example, while 
the Library, consistent with our recommendation, hired a new permanent 
CIO, it remains to be seen whether he will be provided with clear 
responsibility and adequate authority for leading improvements in the 
management of the Library's IT. As it continues these efforts, it will be 
important for the Library to commit to milestones for implementing our 
recommendations and follow through on these commitments in order to 
make progress in improving Its IT management. 

For the Copyright Office, we recommended that it develop (1) more 
detailed plans for its proposed IT improvement initiatives and (2) an IT 
strategic plan with prioritized IT goals, measures, and timelines to guide 
its improvement efforts. In November 2015, Copyright officials provided 
us with plans that had been developed for three IT improvement initiatives 
proposed for funding In fiscal year 2017. These initiatives were for 
software and hardware upgrades, searchable historic copyright records, 
and a data management initiative. The plans for these three initiatives 
Included key elements such as a business problem and proposed 
solution, expected benefits, alignment with the Library’s strategic plan, 
and initial, 3-year cost estimates and funding sources, in addition, as 
noted above, the office recently developed a draft overall strategic plan, 
and it includes strategies to support the goal of improving the Copyright IT 
environment. This is an important step that should help provide direction 
for future IT initiatives. 

In conclusion, effectively managing its IT resources is critical for the 
Library to carry out its mission of preserving and making available the 
knowledge and creative output of the American people, as well as 
ensuring the smooth operations of the nation’s copyright system. 
Widespread weaknesses in IT management at the Library raised serious 
concerns about its ability to effectively carry out its responsibilities in a 
21st century digital environment, in addition, dissatisfaction with services 
and support provided by the Library’s central IT organization had led to 
other service units pursing activities independently, potentially resulting in 
overlapping or duplicative activities. Implementing our recommendations 
will help ensure the Library is better positioned to effectively use 
technology to support its mission. The Library’s recent appointment of a 
permanent CIO is a positive development: ensuring that this official has 
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the appropriate authority and responsibilities is key to addressing the 
many weaknesses we identified. For its part, the Copyright Office has 
taken steps— such as developing a draft strategic plan and detailed plans 
for new IT improvement initiatives — ^that can help lay the groundwork for a 
proactive approach to modernizing its IT environment. 


Chairman Miller. Ranking Member Brady, and Members of the 
Committee, tills concludes my prepared statement. I would be pleased to 
answer any questions you may have at this time. 
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The Chairman. Thank you. 

Before I start my questions, I have been asked by the Copyright 
Alliance to enter in for the record and with a UC, if I could, a re- 
port that they have here, “Improving Customer Service for the 
Copyright Community.” Without objection, I will enter that into the 
record. 

[The information follows:] 
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Copyright Alliance 


The Copyright Alliance, on behalf of our membership, submits this statement for the 
record concerning your December 2, 2015 hearing on “Improving Customer Service for the 
Copyright Community”. The Cop 3 Tight Alliance is a non-profit, public interest and educational 
organization that counts as its members over 15,000 individual creators and organizations across 
the spectrum of copyright disciplines. The Copyright Alliance represents the interests of authors, 
photographers, performers, artists, software developers, musicians, journalists, directors, 
songvwiters, game designers and many other independent creators. The Alliance also represents 
the interests of book publishers, motion picture studios, software companies, music publishers, 
sound recording companies, sports leagues, broadcasters, unions, guilds, and newspaper and 
magazine publishers and many more organizations. What unites these individuals and 
organizations is their reliance on the copyright law to protect their freedom to pursue a livelihood 
and career based on creativity and innovation and to protect their investment in the creation and 
dissemination of copyrighted works for the public to enjoy. The copyright law is critical not 
only to their success and prosperity, but also the short and long-term success of the U.S. 
economy. 

By submitting this testimony 1 hope to assist the Committee in better understanding the 
important role the U.S. Copyright Office — and in particular the Office’s IT system — splays in the 
creation and distribution of new creative works, the concerns we have relating to the Office’s 
operations, IT infrastructure, security, and budget, and the immediate need to take steps to 
modernize the Office. 

Copyright is the foundation for a thriving and ever expanding market of cultural, 
educational, and scientific works, one that in 2013 contributed over 1.1 trillion dollars to the U.S. 
economy and directly employed nearly 5.5 million workers,' As the Office responsible for 
administering all matters relating to copyright, few other government offices are more important 
to the growth of creativity and commercial activity in our nation than the U.S. Copyright Office. 
Within the copyright ecosystem, the Copyright Office plays a pivotal role in the registration of 
creators’ works and the recordation of documents pertaining to those works. The ability of our 
Nation’s independent creators and the businesses that support their work to promptly register and 
record copyright interests with the Office, and of the public to obtain copyright information that 
enables them to license copyrighted works, creates new industries and spurs the economy, which, 
in turn, advances our global competitiveness and technological leadership. 

In view of the ongoing and rapid changes in the information, entertainment, and 
technology sectors, the Copyright Office has never been more important than it is today in 
ensuring that copyright owners have access to critical services that support their artistic and 
economic endeavors, including the creation and dissemination of works to the public, and the 
development of innovative new business models by which to distribute such works. 

Furthermore, given the global and dynamic characteristics of the copyright ecosystem, the 
Copyright Office must be able to rapidly adapt to ensure it is able to offer the tools and resources 
that its stakeholders demand. 


' Stephen Siwek, Copyright Industries in the U.S. Economy; The 2014 Report 2, 18 (IIPA 2014). 
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“Improving Customer Service for the Copyright Community” 


Despite the critical nature of the services provided by the Office, and the substantial 
economic interests that underlie the need for those services, many of them have not kept pace 
with technology and the marketplace. While the Office has made valiant efforts to hear from 
stakeholders and improve its services (or develop new ones, as appropriate), the reality is that of 
the Office remains substantially behind the curve — deficiencies that are the result of many years 
of budgetary neglect and structural deficits that would make it difficult for any agency to merely 
keep pace, let alone modernize the agency. 

As a department of the Library, the Office is obligated to use the Library’s Information 
Technology (IT) systems. The Copyright Office does not have its own IT infrastructure; it uses 
the network, servers, telecommunications, security and all other IT operations controlled and 
managed by the Library of Congress. 

The Library’s information technology systems are antiquated. They are also 
incompatible and impractical in regard to the Office’s underlying objectives and mission. The 
Library IT system is meant to service a library and its associated functions, not an organization 
like the Copyright Office, which, by definition, has a very different mission from the Library and 
which is expected to provide services that affect the legal rights and economic interests of 
creators, owners, users and others who rely on the Copyright Act for their economic and creative 
well-being. 

To make matters worse, the Office is also significantly underfunded and understaffed. 
Within the past several years especially, it is proving exceedingly difficult for the Copyright 
Office to provide timely and effective services to its constituents. Consequently, we think the 
time is ripe for Congress to evaluate the Office’s information technology needs, and other 
aspects of its operations affecting the delivery of services to its constituencies, to ensure that the 
Office has the resources and expertise necessary to serve authors, users, and the public for 
generations to come. 


IT Concerns 

Regardless of the ultimate administrative structure of the Copyright Office, it is of 
paramount importance that the Office has an advanced technology platform that supports the 
needs of its primary users: copyright owners and users of copyrighted works. The copyright 
community requires user-friendly registration and recordation systems and an easily searchable 
registration and recordation database. 

There are a host of critical concerns we have relating to the LOC’s IT systems, the most 
significant of which include: 

IT System Problems Result in a Backlog of Copyright Applications 

Unless and until the Office’s IT problems are effectively addressed, the backlog of 
copyright applications will continue to grow. Applicants may become more disenchanted with 
the Office and many may begin to question (if they haven’t already done so) the value of 
copyright registration, in view of the time and resources required to register their works. This 
may result in the submission of fewer applications, which in turn will translate to fewer deposit 
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Copyright Alliance 


copies for the Copyright Office and thus fewer works for the Library of Congress’ collections, 
and a less robust public record of copyright ownership. 

The Library’s Demands for Deposit Copies in Specific Formats Causes Friction with the 
Copyright Office and Copyright Registration Applicants 

The deposit copy required by the Copyright Office serves numerous purposes. It is used 
by the Office in the examination process to determine whether the work meets the conditions of 
copyrightability and to certify the copyright record for interested parties, for example, as in the 
case of infringement litigation. These deposit copies also form the basis, in part, for the 
collection of the Library of Congress. Because the deposit copy is used by the Library for one 
purpose and by the Copyright Office for a completely different - and often competing - purpose, 
the Library and the Office are often at odds with one another over the type of deposit copy 
required, and use of that copy.^ In fact, some copyright owners refuse to register their works 
with the Copyright Office because they have found the process to be too expensive and 
cumbersome, and because they are concerned about the security of their deposits. 

For example, many newspapers are no longer registering their works with the Copyright 
Office because the Library requires that newspaper deposits be in microfilm format. As 
publishers and institutions move away from microfilm, the Library’s continued and unreasonable 
demand for microfilm copies places an undue financial and administrative burden on newspaper 
copyright owners. The end result is that everyone loses - the Library gets nothing for its 
collection, the public may be missing valuable historical knowledge, and the resulting financial 
hardship precludes newspaper publishers from registering their newspapers, thus making it more 
difficult for them to take action against the online infringers. 

The Functionality of the Copyright Office Registry is Severely Outmoded and Outdated 

The Office’s registration system and its companion recordation system constitute the 
world’s largest database of copyrighted works and copyright ownership information. However, 
the functionality of the registry is drastically out of date relative to search and database 
technologies available today. 

The present recordation process is also shockingly antiquated, cumbersome, and costly: 

It requires manual examination and manual data entry from paper documents - more or less the 
same as it was when the recordation system first launched in the 1870’s. The recordation 
process is extremely time consuming, resource-intensive, and costly to the Office because all 
information, except for information included in the recordation cover sheet (which often is never 
filed), is entered manually (i.e., keyed in) by Copyright Office staff regardless of whether the 


^ The Library of Congress regularly reviews the deposits submitted for copyright registration and then selects the 
deposits that it wants to include in its collection. The Copyright Office has no choice but to turn over its copy to the 
Library because under the statute the Library controls the Office. However, if the Library makes a selection and 
takes the Office’s only copy, then the Office will be unable to satisfy its obligation to certify the copyright record in 
the case of copyright litigation. To date, the deposits the Library has selected have been primarily physical formats. 
Often, the Copyright Office and registrants would prefer to submit a digital deposit copy, but because the Library's 
collection needs require that the deposit be in a physical format, the Copyright Office requires the registrant to 
submit a physical copy. This is a major obstacle to the Copyright Office’s efforts to make the registration process 
more efficient and less expensive for copyright owners. 


4 



60 


“Improving Customer Service for the Copyright Community” 


recordation materials submitted are in digital or print form. The process takes twelve to eighteen 
months for the Office to enter the data ~ largely because of antiquated technology. This is much 
too long. 

As evidence that this is an IT system and not a staffing problem consider that “the Patent 
and Trademark Office recordation staff of 10 now processes over 480,000 patent and trademark 
assignments every year, while the Copyright Office’s staff of 12 processes about 1 1,000 
dociunents per year - less than one-fortieth of the number of documents handled by the slightly 
smaller staff at the Patent and Trademark Office."^ The copyright marketplace moves quickly 
and licensees, lawyers, and others need this information immediately to facilitate copyright 
transactions, enforce copyright interests, and generally engage in copyright-related business — 
not a year and a half later. 

The Library’s Inability to Keep the Online Registration System Running Causes Numerous 
Problems 

The problems the Library has had in keeping the Copyright Office systems running are 
well documented. During the federal government shutdown in the fall of 2013, the Library took 
its websites offline, including the Copyright Office’s online database of copyright ownership 
records, as well as its online registration application filing system, , even though registrations 
must, by law, be date stamped upon receipt, for example, to grant standing to lawsuits or for 
remedies purposes.'' Unfortunately, this is not a standalone example. Earlier this fall, a 
scheduled power outage for routine maintenance of the Library’s power systems resulted in the 
electronic registration system being shut down for ten days, after the Library’s system 
administrators were unable to bring the system back online after power was restored. ^ 

The failure to keep the online registration system up and running has caused significant 
disruptions that resuit in a substantial backlog of registrations and recordations, and further 
significantly expands the pendency time for issuing registrations. Having an autonomous system 
would allow the Copyright Office, rather than LOC IT administrators, to make decisions that 
impact copyright owners and users, and take into account the nature of the Office’s business in 
ways that the Library does not, and has traditionally been unwilling, to understand. 

The Current Funding Structure Further Limits The Office ’s Ability to Remedy its IT Issues, 
or Plan for Future Upgrades 

The Copyright Office’s current funding structure contributes to the problems caused by 
the IT system, which prevent it from efficiently serving its constituencies. Among the challenges 
it faces are reductions in appropriated funding (appropriations that must be approved by Library, 
rather than being dedicated specifically or exclusively to Copyright Office ftinctions, with 


’ See Transforming Document Recordation at the United States Copyright Office at p. 56 (Dec. 2014) 
http://copyright.gov/docs/recordation/recordation-report.pdf. 

“ 17U.S.C. §§411,412. 

* Peggy McGlone, Copyright Office 's Online Registration Hasn 't Work for Almost a Week, WASH POST, Sept. 3, 
2015, OTai/aWec/https;//www,washingtonpost.com/lifestyle/style/copyright-offices-onlme-registration-hasnt- 
worked-for-almost-a-week/2015/09/03/bl2781e2-5261-l Ie5-9812-92d5948a40f8_story.html; Whitney Blair 
Wychoff. Copyright Registration System Back Online, FedScoop (Sept. 8, 2015, 10:30 AM), 
http://fedscoop,com/copyright-registration-system-back-online. 
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decisions made by the Copyright Office).^ This has resulted in budget shortfalls to critical 
Copyright Office functions. With a current budget of just $47,5 million ($27.9 million of which 
is simply an authorization to spend fees the Office collects/ and $19.6 in appropriated funding), 
the Copyright Office’s resources are stretched thin. Despite growth in the copyright industries, 
the Office’s budget has actually decreased hy $1 million (2%) since 2010,* and budgetary offsets 
put in place by Congress that require the Office to tap into its reserve fund often leave the Office 
without an operating cushion. 

The required strict adherence to a cost-recovery model means that the Office may not use 
the money it collects from user fees for capital improvements or other investments, such as new 
IT systems. That seems to be a moot point in any event as fee collections in recent years have 
regularly fallen below the Office’s spending authority, highlighting the fact that because 
registration is not compulsory under the Copyright Act, the Office must work to ensure that the 
process is relatively easy, to encourage authors — especially smaller companies and independent 
creators — ^to register their works. The burden of supporting an IT overhaul, though, should not 
rest exclusively on those registering works or recording documents, since the Copyright Office 
serves both copyright owners and users of copyrighted works. Moreover, by increasing costs of 
registration or recordations, particularly to small and medium enterprises, or to those whose 
creative enterprises generate a large volume of individually copyrighted works rather than a 
smaller volume of relatively high value works, the purposes of the registration system may be 
undermined, and registrations and recordations might decrease, harming the amount, reliability 
and overall usefulness of data in the databases for registrations and recorded documents. 

RECOMMENDATIONS 

Within the context of the subject matter of this hearing, the Copyright Alliance offers the 
following several recommendations to help strengthen the performance of the Copyright Office’s 
IT infrastructure that we believe will ensure the successful future operation of the Copyright 
Office. 

Provide the Copyright Office its Own Dedicated IT System 

The digital content marketplace is increasingly dynamic and requires a Copyright Office 
with flexible systems that can rapidly accommodate market changes.’ The IT systems of the 
Copyright Office are intertwined with those of the broader LOC, and resolving the various issues 
presented by their different missions is a significant problem that seems to be getting worse. The 
two offices each have their own unique IT requirements, which can lead to strains on resources 
and therefore impediments for the Copyright Office’s users. 


^ See USCO Strategic Plan at 58-9. 

’ Library OF Congress, Library of Congress Fiscal 2016 Budget Justification 107 (2015), available at 
https://www.ioc.gov/portals/static/abouFreports-and-budgets/Ddf/fv20 1 6. pdf . This reflects the Copyright Basic 
portion of the total Copyright Office budget and FTE usage/ceiling. Excluded are FTE usage, ceiling, and budget for 
the Copyright Office’s Licensing Division and Copyright Royalty Board. 

* Library OF Congress, library of Congress Fiscal 201 1 Budget Justification 125 (20 10) (noting the 20 10 
basic budget for the Copyright Office was $48.5 million), available at http://loc.gov/portals/static/abouFreports-and- 
budgets/pdFfy201 l.pdf. 

’ For example, many copyrightable works are bom digital and should be easily registered in that format. 


6 



62 


“Improving Customer Servi(» for the Copyright Community” 


The Office needs a more advanced IT infrastructure - one that is specifically dedicated to 
the Office and can better support the needs of its users. Its customers need a more user-friendly 
registration and recordation system that is quickly adaptable to changes in the copyright 
marketplace and easily searchable across numerous data fields. 

Improve the Security of the Copyright Office Database of Copyrighted Works 

One essential improvement from developing a dedicated IT system for the Copyright 
Office would be to enhance its security for digital works that are deposited as a part of the 
registration process. As more and more content is distributed only in digital form, copyright 
owners send digital deposit copies, increasing concerns about the security of the Office’s 
database of copyright deposits. A digital copy of a work leaked from the Copyright Office 
would be virtually indistinguishable from a commercially available copy, potentially displacing 
the market for the latter, and dramatically reducing the market value of the work. 

The Copyright Office has acknowledged the security issues in its just released report on 
Technological Upgrades to Registration and Recordation,'^ which stated that “the Copyright 
Office cannot provide 100% assurance that a deposit submitted by a copyright owner has not 
been modified. Nor can it ensure that the deposit has been archived in a manner that is 
consistent with the requirements of the copyright law.... In a worst-case scenario... the Office 
would have no knowledge as to whether deposits are being accessed, deleted, removed, or 
appropriated.” These statements are understandably troubling to copyright owners who register 
their works with the Office. 

Improve the Efficiency and Functionality of the Registration and Recordation Systems 

The efficiency and functionality of the registration and recordation systems must 
improve. The Copyright Office provided a number of recommendations in its 2015 report on 
technical upgrades that are worth examining in this regard." In particular, we recommend that 
the Copyright Office improve the search function for its records and registrations, including an 
acceleration of the importing of data during registration and recordations, as well as 
improvements and expansions in the data to be included in the database. Moreover, the database 
could be further enhanced by allowing the voluntary linking of external databases to the 
Copyright Office’s systems, with the caveat that any external data meet quality thresholds 
established by the Copyright Office. 

It is also essential that the Office reengineer the recordation process to make historic 
records available, and to build a comprehensive, publicly accessible database of copyright 
ownership transactions that is easily searchable, user-friendly, and provides a modem user 
experience. It must become easier and less costly for ownership and other documents to be 
recorded with the Office and the Office must improve the efficiency and speed of the recordation 
process, as well as making it easier to search and retrieve documents from the Office’s 
recordation database. 


U.S. Copyright Office, Report and Recommendation of the Technical Upgrades Special Project 
Team 77 (2015). 

"Id. 


1 



63 


Copyright Alliance 


It is also crucial that the information that the Office collects as part of its registration and 
recordation systems be more easily accessible, current and searchable by the public through the 
Copyright Office website. New digital technologies have dramatically quickened the pace of 
commercial transactions involving copyrighted works. Parties to these transactions require 
access to copyright information at a commensurate speed. Anything less, may slow the pace of 
commercial innovation and the copyright marketplace. It is, therefore, critical that the Copyright 
Office make the most current registration and recordation information available on its site. 

The Office has been making progress toward these goals, but progress has been slow, and 
it will continue to be slow so long as the Copyright Office continues to be encumbered by the IT, 
budgetary, and other limitations imposed by the Library of Congress. 

Improved Reliability of the IT System 

When undergoing IT improvements, we also recommend the Copyright Office improve 
the reliability and functionality of its systems. We realize that some of the functions, instability, 
and user experience challenges with its systems can be attributed to the previously discussed 
relationship between the Copyright Office’s IT platforms and the Library, when there should be 
an independent Copyright Office IT system, and decisions about the system should be made 
independently, based on the unique needs of the copyright community. 

Increase the Copyright Office’s Funding 

Congress should increase the Copyright Office’s funding to enable the Office to make 
immediate critical improvements to operations and IT.'^ To fully modernize, the Copyright 
Office will require an infusion of new technologies — needs that come with a big price tag. 
Although the costs of implementing new functionalities and improvements in the Office will be 
significant expenditure at the outset, these costs will be offset in the long run by the cost savings 
generated by new efficiencies and streamlined workflows, and by revenue that the Office might 
generate from use of its new services and increased information availability. When one 
considers the importance of the copyright industries to the U.S. economy, increasing the Office’s 
appropriations for modernization purposes is certainly justified. 

The Office also needs more flexibility in its legal spending authority. The Office should 
have the ability to build a reserve account from the fees collected so it has the necessary funds to 
draw from to make capital and other improvements in different budget cycles, including during 
periods when incoming fee receipts are down. 


Although the Copyright Office resides within the Library of Congress, it receives a separate appropriation. The 
budget for the Copyright Office is exceedingly small, given the amount and complexity of its responsibilities. In 
fiscal year 2015, the Office had an overall budget of only $47.5 million. Over one-half of the Copyright Office’s 
budget (approximately $27.9 million) came from user fees for registration, recordation, and other public services. 
The rest (about $19.6 million) came from appropriated dollars. 
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CONCLUSION 

It is clear that many of the Copyright Office’s struggles to administer the copyright law 
result from its subservient position within the Library of Congress. Many of the technical IT 
constraints and inadequacies, as well as the budgetary limitations and restrictions stem from 
requirements or restraints placed on the Copyright Office by the Library of Congress. It is 
highly unlikely that these operational problems can be resolved in the near future so long as the 
Copyright Office continues to operate under the supervision and direction of the Library of 
Congress. 

The best chance to effectuate real timely improvements is to grant the Copyright Office 
the same type of autonomy that Congress has granted to another department within the Library - 
the Congressional Research Service (CRS). Unlike the Copyright Office, the Library has no 
authority to supervise or direct the activities of CRS. To the contrary, the Library is statutorily 
required to “encourage, assist, and promote” the CRS’s activities “in every possible way.”'^ 

This type of autonomy is what allows CRS to provide Congress with analysis that is 
authoritative, confidential, objective and nonpartisan, while also maintaining its independence 
from the Librarian of Congress. By giving the Copyright Office more autonomy and the Library 
less control over the Office, many of the operational issues previously identified could be 
resolved. 

There needs to be wholesale changes in the structure and operations of the U.S. 
Copyright Office and those changes need to take place immediately. The services provided by 
the Copyright Office are critical to the U.S. economy. The money and time spent today 
investing in an efficient and user-friendly Copyright Office will result in substantial benefits in 
the future for the U.S. economy, and of course, the U.S. Copyright Office itself. 

We look forward to working with the Committee and other stakeholders as this issue is 
considered by the Committee. 

Thank you. 


Keith Kupferschmid 
Chief Executive Officer 
Copyright Alliance 


“ 2 U.S.C. § 166(b). 
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The Chairman. Certainly, listening to Mr. Willemssen articulate 
a number of the recommendations that were in the GAO report is 
eye opening, and I guess let’s just start with that. 

If I could ask Mr. Mao, here you have 31 recommendations, 
which he didn’t go through all of them, but really, apparently none 
of them have been implemented yet, even though the Library did 
say that they were going to start some of them in September of this 
year, which has not happened. I do know that you have hired a 
CIO, but I don’t think you have strategically outlined all the var- 
ious areas for how that is all going to work. So perhaps you could 
just tell us. I am sure you have read the report and dissected it, 
and I am hopeful that you can tell us how you would be prioritizing 
all of these various recommendations that they have made to you. 

Mr. Mao. Thank you, yes. And we have taken the 31 rec- 
ommendations, and by our account some of them are completed. 
We are working right now with the GAO audit team to get valida- 
tion from them that they are indeed completed. We have met with 
them regularly to discuss them and will continue to meet with 
them regularly going forward to ensure that all of the 31 rec- 
ommendations are completed. We have a schedule that will allow 
us to complete the 31 recommendations hopefully by 2018. 

The Chairman. Is that something you can share with the Com- 
mittee? 

Mr. Mao. The schedule? 

The Chairman. Yes. 

Mr. Mao. Certainly, we can. I am happy to provide it. 

The Chairman. Okay, could you just tell us what is your top pri- 
ority, one, two, three, perhaps? 

Mr. Mao. Well, the top priorities were identified earlier, and one 
of them, of course, the number one priority was hiring a permanent 
CIO, which we do have on board. And I understand Mr. 
Willemssen’s comment that, you know, it remains to be seen 
whether the hiring of this permanent CIO will completely close out 
that recommendation. But he has started just in September and I 
think we have made good progress with him in the last 2 months. 
And I look forward to proving to the GAO that we can close out 
that particular recommendation. 

And in addition, we have created an IT strategic plan that was 
identified in the GAO report. That is in its final stages right now 
to be shared with the Executive Committee very shortly and we 
hope to have that released by the end of this month. 

We are also implementing processes and procedures for IT in- 
vestment strategies going forward to make sure that all of the in- 
formation we collect and all of the information is shared trans- 
parently across the entire Library and also that information sub- 
mitted by all of the units for their needs are considered, and that 
process was just recently started. 

For our preparation for the fiscal 2017 budget cycle, we consid- 
ered new and expanded program requests from all of the units and 
we walked through the process as we have identified. And cer- 
tainly, our regulations and internal guidelines will be modified to 
reflect all of these processes that we are putting into place. 

The Chairman. I appreciate that. 
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Mr. Willemssen, as you heard that, maybe you are already famil- 
iar with that list of priorities. What is your thought about those 
priorities, or should they be looking at other priorities? What do 
you think? 

Mr. Willemssen. I agree with the Acting Librarian on the first 
priority, appointing a CIO. The next step is making sure that the 
CIO has adequate responsibility and authority to carry out the mis- 
sion. That is what we will be looking for over the next couple 
months, in addition to seeing that the CIO has oversight over mis- 
sion-critical systems and takes more of a leading role on what we 
refer to as commodity IT — back office systems, financial manage- 
ment, human resources, email, laptops, cell phones, et cetera. We 
would like to see more of an active role there. 

The other critical things that we think from an immediacy stand- 
point that need to be addressed are one, you need to get a clear 
inventory on exactly where your assets are located. The Library 
has made a lot of progress on that, and are doing some reconcili- 
ation of the data now. One of the reasons this is important is that 
you have to know where your access points are from an information 
security standpoint so that you can protect your systems and your 
data. 

Secondly, the Library needs to get a handle on IT spending, and 
they are in the process of doing that. So it is not to say they 
haven’t made any progress. They have made tremendous progress. 
However, they are not quite there yet. 

There are also some information security weaknesses from a 
patching and perimeter control perspective that they need to focus 
on addressing. The Library has probably made the most progress 
in the information security area. You may know we also issued a 
not-for-public-release in-depth security report that had 74 rec- 
ommendations. The Library has already made progress on many of 
those recommendations. 

The Chairman. Very good. Well, I am delighted hearing that you 
are making that kind of progress and that you look at the GAO re- 
port as an opportunity for help, and a tool of assistance, not in an 
adversarial way. Sometimes, when people are critical of our nest, 
we have a tendency to see that as an adversarial kind of thing, but 
we shouldn’t look at it that way. Audits, and GAO in particular, 
can be extremely helpful for every agency. 

Ms. Pallante, you and I had an opportunity to chat on the phone 
for quite a while yesterday about various things that are hap- 
pening in your agency, and I mentioned to you that in my former 
life as a Michigan secretary of state where we had jurisdiction over 
the DMV as well, I had the largest agency, I guess, in State gov- 
ernment at that time, but we always said that customer service 
was the operative phrase for everything that we were trying to do. 
I know that is so in your department as well. 

Talking about eCO — I know that is how it is pronounced, I don’t 
know exactly what it is, E something — but that is an ability for 
your customers to file online, right? Maybe you could talk about 
that a little bit. What is that? Is it particularly helpful? You men- 
tioned about the customer experiences, so on and so forth. You also 
said that you just released this report yesterday. So, I mean, I have 
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not had time to even — I am just looking at it right now. Anyway, 
we will enter it into the record, without objection. 

[The information follows:] 
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The Chairman. Perhaps you could talk a little bit about whether 
or not your customers look at your current system, the eCO system, 
as something that is really customer service oriented, that it is 
easier for them, that they have a good experience with that. 

Ms. Pallante. Thank you. Chairman Miller. 

So I think one way to look at eCO, because it predates everybody 
at this table, is that it was a good first-generation system. It is 10 
years old, and it was probably outdated by the time it was imple- 
mented. I get to say that because I was in private practice in New 
York at the time and I wasn’t there and don’t really know whether 
it was state of the art at the time or not. 

I do think that off-the-shelf software was a big push in govern- 
ment agencies at that time, and I think those were probably the 
instructions coming from the appropriators in conversations with 
the Librarian’s office about budget. 

And I will further say that I think one of the biggest issues is 
that — and, again, this may reflect the period, not so much the 
agency — the goal was really to replicate the paper processes that 
had been in place for a century into some kind of electronic inter- 
face, rather than create a digital interface that harnesses digital 
technology and connects to the global marketplace, which is where 
we are today. 

So when I was appointed Register on June 1, 2011, immediately 
in talking with my staff and doing a lot of external stakeholder 
meetings it became clear to me that eCO was something we needed 
to look at closely. What I wasn’t counting on was that eCO — as the 
software application that we manage — was sitting on top of a net- 
work and operating system and an IT governance model that really 
held the key to the effectiveness of whether that could be developed 
further or not. 

So I am not an auditor or an accountant. We have somebody here 
to answer those questions. But this becomes a sunk cost issue, 
right? So I am not a fan of eCO. Most people are not. It is probably 
not a flexible enough software package to further customize and in- 
vest in. It never extended to recordation, which is different than 
registration. That is where one records security interests and wills 
and estates and any other way that you are going to track IP rights 
in the world. 

Recordation is still paper. I think we might want to consider it 
a blessing that we didn’t go ahead and dump recordation into eCO 
10 years ago as well. That is not to say it hasn’t been painful to 
have that be a paper process, but I have come to believe that we 
have an opportunity now to get that right, and in doing recordation 
right, go back and integrate registration at the same level. 

So in the 360 that I did in the technical upgrades report that I 
released, it documents many of the frustrations. It is too slow, it 
is too clunky, it is not intuitive. One can’t go into the system and 
track where they are in the process. 

I will say this. Whatever frustrations the public experiences are 
then some on the employee side who are on the other side of that 
software package using it day in and day out. So with that in mind 
and having done the baseline report, we do outline here the kind 
of administration that we really should be offering the public. 
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The Chairman. Well, I will take that as an answer that you don’t 
really like the system and it is obviously very antiquated. So one 
of the things coming out of this hearing, and following as well, is 
the Library is prioritizing resources in IT investment, et cetera. We 
will be interested to see how all of that works. I mean, we have 
to know so that we can help you. It is really the purpose of this 
hearing, so that this Committee can be aware of the challenges 
that you are all facing at the Library, and all across the Library, 
but certainly in the Copyright Office with IT challenges and how 
we can assist getting us up to speed so that customers — I mean, 
waiting 18 months for some of these things is a huge handicap 
for 

Ms. Pallante. Those are paper processes, just so you know, not 
the electronic. 

The Chairman. Oh, okay, the paper process. 

Ms. Pallante. There are Members who have constituents who 
still prefer to mail things in by paper. So that is the extreme end. 

The Chairman. I see. 

Ms. Pallante. But it should be immediate. You are right. 

The Chairman. All right, very good. The Chair recognizes the 
Ranking Member. 

Mr. Brady. Thank you. Madam Chair. 

David, thank you for your testimony. It is clear that you are 
doing a good bit of work very quickly at the Library. It is a great 
institution with great resources for us and for the American people. 
We are friendlies here. We want to be able to be helpful to you. 
So anything that you need when you need anything from us, just 
let us know, you know, and maybe we can get ahead of something 
before something becomes a lot bigger than we can have to handle. 
So stay in touch with us, and we will stay in touch with you. 

I know we are here to talk about the Copyright, but I hope you 
give me a little few minutes on some details on other priorities that 
the Library is doing now under your watch. 

Mr. Mao. Thank you. Well, let me tell you about my goal during 
this time as Acting Librarian of Congress, and my main goal for 
this period is to ensure that the Library of Congress is best posi- 
tioned for the future. That is it. The topic of today’s hearing, IT 
management, certainly is a part of that priority and part of that 
goal. It is a great priority. 

But there are others as well. Other priorities for me in particular 
are focusing on the staff at the Library of Congress, our human re- 
sources. We need to take the time to invest the time and resources, 
develop our staff currently and develop future staff. Certainly col- 
lection care is something that we all have to worry about at the Li- 
brary of Congress and that is another great priority. 

But I think if you take all of these, the IT management, the 
human resources, the collection care, all of them can be supported 
by the pillars that I talked about in my opening statement talking 
about leadership and collaboration, communication, and good gov- 
ernance to make sure that we can support all of these. And so I 
look forward to working with not only my colleague the Register of 
Copyrights but all of the senior leaders across the Library of Con- 
gress, as well as the very, very dedicated staff that we have at the 
Library and you Members of Congress to ensure that the Library 
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of Congress continues to be the great institution that it is. Thank 
you. 

Mr. Brady. Thank you. 

And thank you, Madam Chair. I have no other questions. 

The Chairman. The Chair recognizes Mr. Harper. 

Mr. Harper. Thank you, Madam Chair. 

And thanks to each of you. There is obviously a little perceived 
tension on what your job is and what you have to do, and we want 
to be very sensitive to that to make sure that you have everything 
that you need to function properly. You have the great responsi- 
bility to oversee the Copyright Office, which is of tremendous im- 
portance and becoming more important every day. 

And I can imagine that 10 years ago, we had no real concept for 
what we were going to be or no feel for what we were going to be 
doing today and the challenges we will have as we move more and 
more into a digital age and how that is going to be done. And you 
have not only to take care of it there, but to take care of those 
users and customers, we shall say, that are out there. 

And, Mr. Mao, you have got an even larger responsibility. In that 
larger responsibility we want to make sure that we are doing ev- 
erything that you are going to need to do that job, that is the pur- 
pose of this hearing. 

So if eCO is not the future, it is really not even the present, what 
do we do? Do you have a recommendation that you have for what 
you need, how much it would cost, and if you had that available, 
how quickly it could be implemented? 

Ms. Pallante. Well, thank you. 

So, yes, this strategic plan outlines in great detail our rec- 
ommendations for moving forward, as well as the broad copyright 
community, so all parts of it, copyright owners, individual authors, 
businesses, public interest organizations, the tech sector, et cetera. 

Again, eCO is almost the last piece. That is the software applica- 
tion for certain services that the public interacts with. And that 
would have been my early intuition as Register, could we please 
throw away eCO and go to something open source? It can’t be that 
hard. But in fact, it has to be related to the underlying operating 
system, who has the ability to maintain and access that, who has 
administrative privileges, how that relates to a robust, secure en- 
terprise architecture designed with all of the different services in 
mind. 

One of the big issues we have is that all of the services are not 
integrated. It is really frustrating, right? I mean, if you are looking 
for rights, you want to look for registrations, but if you registered 
a book or a movie in 1985 chances are it has been assigned or li- 
censed multiple times, including internationally. That is the chain 
of title that we need to acknowledge, and that has 

Mr. Harper. So how do you get everything in one universe? 

Ms. Pallante. Yeah. And it requires legal thinking and IT 
thinking at the same time, and that has been disconnected in the 
past. 

Mr. Harper. And is it something, though, with work, funds, and 
determination 

Ms. Pallante. Absolutely. 
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Mr. Harper. You are clear in your report, and I looked at the 
report last night, my late-night homework to look at it. 

So, Mr. Mao, tell me what you have been doing to address these 
concerns as far as meeting with your new CIO and with the Reg- 
ister to make sure that you are going to he able to accomplish those 
goals. 

Mr. Mao. Well, thank you. First thing I want to say is that the 
Copyright Office’s concerns are concerns for the Library of Con- 
gress and certainly they are a concern of mine, and we take them 
all very seriously. And so we are moving aggressively on that and 
I think we have done so in the last few months on trying to address 
the Copyright Office’s concerns, especially in the IT arena. We have 
developed a draft IT strategic plan that links, when released, you 
will see that it links with the recently released Library of Congress 
Strategic Plan for fiscal years 2016 to 2020 and also works in con- 
cert with the strategic plan that the Register has released. 

In addition, we are working very closely by communicating. The 
CIO speaks on a regular basis, if not a daily basis, with the CIO 
for the Copyright Office so that we can make sure we understand 
the concerns that are being raised and that we can address them 
and make sure that we can provide the service and support that 
is needed. 

Mr. Harper. And does Mr. Barton have the authority and auton- 
omy to move towards those things that Register Pallante needs to 
do? 

Mr. Mao. Yes, indeed. The CIO is a member of the Library’s Ex- 
ecutive Committee. As I mentioned earlier, I meet with him on a 
weekly basis to talk about the challenges that we are facing and 
how we are addressing them. And he has taken a great, great first 
couple of weeks, you know, in place and moving right ahead. And 
I believe Mr. Willemssen had indicated that he was impressed with 
the progress that we have made in a very short amount of time. 
And so we will continue with that moving forward. 

Mr. Harper. Of course, I realize he has only been on the job 
since September the 8th, not even 3 months, and I know those are 
ongoing issues and concerns that we have. But it has certainly got 
to be, you know, these are things that we as a Committee expect 
you to be able to work through, work out. 

And we are here to help. And so come to us when those things 
are here and give us that plan, what we have got to do. This is 
something we cannot neglect. And we want to, certainly, and I 
know this is something that Chair Miller is very committed to 
doing, and we will continue to have follow-up to check that 
progress, I am sure. 

With that, I yield back. 

The Chairman. The Chair recognizes the gentlelady from Cali- 
fornia, Ms. Lofgren. 

Ms. Lofgren. Thank you. Madam Chair, and thanks for this 
hearing. 

Mr. Mao, welcome to the Committee. You come at a time of great 
transition for the Library. And certainly your predecessor did many 
wonderful things in his long career. Being a techie was not one of 
his fine points. So you have your work cut out for you, as I am sure 
you are aware. 
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You know, I listened carefully to all of the testimony. I am the 
only member of the Committee that serves on hoth the Judiciary 
Committee and this Committee. And I don’t want to get too far into 
the weeds on copyright law, hut you have to to some extent. 

Section 1201 of the Digital Millennium Copyright Act assigns to 
the Register certain functions to provide for exemptions for 
anticircumvention provisions and this has heen problematic. I am 
sure you heard from your constituents a couple of years ago when 
the office said you couldn’t take the cell phone that you own and 
utilize it. And of course we had to go back in and change it. You 
may not have heard of the time that the Register declined to ap- 
prove in 2010, I believe it was, the circumvention so that blind peo- 
ple could get text-to-voice. The reason why you didn’t hear about 
that was because the Librarian of Congress, thank God, overruled 
the Register on that very bad decision. 

So I do think there is, there has traditionally been a great value 
in having the office located in the Library itself I just wanted to 
express, since I am here and we haven’t had the Register in the 
Judiciary Committee, some grave concerns about the latest lack of 
exemption for vehicle research. As you know, almost every auto- 
mobile now has software in it. And what the ruling has done is 
that if your auto mechanic has to circumvent the software to repair 
the car, they have violated the DMCA, because there is a specific 
ruling by the Register that third parties can’t circumvent the soft- 
ware. 

I think that is a wrongheaded decision and I think it is also a 
dangerous decision, because all of the software defects in auto- 
mobiles, and there are many, unfortunately, have been found out 
by third parties. The manufacturers aren’t the ones saying, you 
know, by the way, your car can be hacked. It is third parties. So 
I think, I am hoping that the Register can share this with the new 
Acting Librarian and he might be able to step in and put some 
sense into this issue. 

Getting back to funding, I noticed in the GAO report, which is 
very helpful — and I am so appreciative of the GAO. You guys wade 
in, you don’t have an agenda, you just try and figure out what is 
going on. You are not perfect any more than any of us are, but, you 
know, you call it as you see it. And it is so appreciated. You are 
really a valuable asset for the Congress and the country. 

And I notice that you have talked about on page 23 the Register 
basically hasn’t formatted a plan, which I think is problematic, but 
obviously any plan would need to be funded. 

Now, I believe, and I don’t know if you looked at this, Mr. Mao, 
that it is the office’s position that the fee-setting authority would 
not allow fees to fund the IT upgrades and expansions. I don’t 
know — I don’t think that is true because the statute actually says 
that when setting fees the reasonable costs incurred by the Copy- 
right Office for providing registration, recordation, and, quote “pro- 
vision of services” can be the basis for the fees. And any tech com- 
pany in the world would include software development as part of 
the provision of services in something that would be, I think, part 
of this fee structure. 

Did you have a chance to look at that? 

Mr. WiLLEMSSEN. We did not look at that specific issue. 
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Ms. Lofgren. I wonder if you could take a quick look at that. 

Mr. WiLLEMSSEN. Okay. 

Ms. Lofgren. And the other thing that I am wondering about is, 
does the Copyright Office receive more in fees than it is allowed to 
spend in the appropriations cap and how much reserve is currently 
sitting in the Copyright Office’s treasury? Mayhe, I mean, anybody 
who can answer that would be welcome to do so, anyone who 
knows the answer. 

Ms. Pallante. I would be happy to answer that. I would also 
like to say, although I don’t want to debate section 1201, that the 
Acting Librarian signed the rule that went out this year that you 
have referred to after extensive consultation based on a 400-page 
analysis and a year-and-a-half process. The reasons for all of the 
exemptions are noted in great detail and also provide the input of 
the Secretary of Commerce as required by the statute. 

With respect to the fees, under the current fee structure we have 
recommended that the language, which dates back a couple of dec- 
ades, be adjusted to allow for some apportionment to charge for 
capital improvements. Yes, it allows us to charge for some inflation 
and some additional cost, but effectively we are charging for the 
cost of the service as we are rendering it. 

There are other tweaks, whether we can charge in the aggregate 
and cover cost in the aggregate, et cetera, how we protect small ac- 
tors versus asking big actors to pay a little bit more. These are big- 
ger policy issues that will require some statutory recommendations 
from us. The appropriators have asked that we conduct a public 
process on these issues, which we are in the middle of formulating 
at the time. 

With respect to the reserve, we are asked every year to articulate 
what we think we will receive in fees. And we base that on our best 
judgment and calculations. And in a good year we recover more. In 
a bad year we recover less. When we recover more it goes into our 
reserve account, which we then draw on for the next budget cycle. 

So, for example, in the fiscal year 2017 budget cycle, which we 
are now putting proposals forward for, some of the things we want 
to fund, like, for example, making historic records searchable, that 
have finite cost, are well funded out of a set finite reserve amount 
of money. 

Ms. Lofgren. Well, it was actually a simple question. What is 
the amount in the reserve account? 

Ms. Pallante. What is the amount right at this moment? 

Ms. Lofgren. Right. 

Ms. Pallante. I wouldn’t know. But we have — it is not much. It 
is under $5 million normally. 

Ms. Lofgren. I just wondered. I mean, I don’t have an agenda 
here. I just wondered what the amount was. And I would note 

Ms. Pallante. We usually estimate within 2- or 3- to $5 million, 
we get it right. 

Ms. Lofgren. The fee-setting authority was given in 1997 with 
the electronic filing pilot program in 2006. So I think if you look 
at the plain language of the statute, you can charge off. And I am 
saying this because I don’t think the taxpayers ought to be paying 
for this. When it comes to the Patent Office, the patent applicants 
pay for everything. There is no taxpayer’s money in the patent sys- 
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tern, and I don’t think the taxpayers ought to be subsidizing this 
either. I think users ought to pay for it. 

Ms. Pallante. May I respond to that, please? 

Ms. Lofgren. No, because I think this is — my time is over and 
I am going to yield back. But that is just my opinion, and obviously 
there is a longer discussion, a philosophical one. But what the tax- 
payers pay for and what they don’t is something that, you know, 
we need to talk about. 

The Chairman. I thank the gentlelady. 

The Chair recognizes the gentleman from Florida, Mr. Nugent. 

Mr. Nugent. Thank you. Madam Chair. I appreciate this hear- 
ing. It is a big change from a hearing I just came from with regards 
to ISIS. So it is actually a pleasure. 

But, you know, when I was Chief Executive Officer of a sheriffs 
office IT would come in and I would sort of glass over in regards 
to — you know, my big thing was, well, you should just be able to 
make that work. And I found out it is always not as simple as that. 

But my question really goes, obviously there is some angst here, 
as it relates to the CIO for the Library of Congress, how many sub- 
divisions does that CIO have under its broad authority within the 
Library of Congress? 

Mr. Mao. Well, in part of our realignment process launched ear- 
lier this year, where we realigned a lot of divisions across the Li- 
brary, not just the CIO office, our first draft at that has the CIO 
sitting above, with various units under, for example, like, develop- 
ment or — off the top of my head I can’t think of the exact titles. 
But then that is the next management layer underneath that. 

Are you talking about with respect to the other units specifically, 
or to the services? 

Mr. Nugent. Well, like with the Register. I mean, what number 
of subdivisions does the CIO actually control? 

Because, Ms. Pallante, you have your own CIO? 

Ms. Pallante. Yes. 

Mr. Nugent. So how many CIOs does that CIO deal with on a 
daily basis? 

Mr. Mao. I see. I understand your question now. 

There are two other CIOs, Chief Information Officers, currently 
at the Library of Congress. One works currently in the Copyright 
Office and the other one in the Congressional Research Service. 

Mr. Nugent. Okay. So when the Library of Congress’ CIO was 
interviewed, hired, Ms. Pallante, did you have any input into that? 

Ms. Pallante. Yes. We had people meet him — meet the two fi- 
nalists after the fact. Yes, before he was hired. 

Mr. Nugent. Okay. There was an answer given, and you kind of 
rolled your eyes, as it relates to the CIO today in regards to, I 
guess, working relationship. 

Ms. Pallante. No. No. The question that was asked was does he 
have sufficient authority. I believe that the CIO and the state of 
best practices for CIOs is that they report to the top of the agency, 
like I report to the top of the agency. In that way, you have the 
trust and partnership and same level of leadership that you need 
to really decide what part of the agency is going to do what. 

What I was objecting to, and I think we have discussed inter- 
nally, is that the CIO does not report to the Librarian, but reports 
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to a Chief Operating Officer position that was created, which in 
turn reports to the Deputy Librarian, which reports to the Acting 
Librarian. I would like to see that addressed. I have been out- 
spoken about that. 

Mr. Nugent. Mr. Mao, do you have a comment in regard? I 
mean, that makes a lot of sense. When you have all these different 
bureaucracies in between, I think it then becomes a little more dif- 
ficult. As the Librarian today, you have to make decisions, and par- 
ticularly in resources, I would think, how do you do those develop- 
mental resources that you have two subdivisions that need help? 
Would it be easier if that CIO reported directly to you? 

Mr. Mao. Well, in our estimation, the way we planned our reor- 
ganization or realignment, it was what we considered to be the best 
structure. And the Chief Operating Officer reports directly to the 
Librarian of Congress, similar to, as Ms. Pallante was saying, the 
Register of Copyrights. All of the senior executives, members of the 
Executive Committee, in purpose all report up to the Librarian of 
Congress, or in this case the Acting Librarian of Congress. The 
Chief Information Officer sits on the Executive Committee, along 
with all of the other senior executives in the Library. As I men- 
tioned, I meet weekly with the Chief Information Officer to discuss 
issues, and so I make sure that I am aware of what is going on 
in terms of our challenges and making sure that we are staying on 
top of what is happening. 

Now, that is not to say that changes can’t be made. Certainly 

Mr. Nugent. Well, who makes that decision? Who makes that 
decision as to the reporting requirements of those department 
heads? 

Mr. Mao. It would be the Librarian. And so when we launched 
the initial realignment earlier this year, it came from the Librar- 
ian’s office. 

Mr. Nugent. Which you have now taken over. 

Mr. Mao. That I am a part of, yes. 

Mr. Nugent. You are a part of, yes. Would you have any rec- 
ommendations in the future as to how to go forward to make sure 
that from a customer standpoint, you know, the Register’s office is 
a customer of yours, as she has customers of that particular sub- 
division. How do you propose to fix that, to make sure that your 
customer is getting the proper service in regards to the proper 

Mr. Mao. Well, that is the goal for the Office of the Librarian, 
which is to make sure that all component parts of the Library of 
Congress, whether it be the Copyright Office, the Congressional Re- 
search Service, the Law Library, are all receiving the support need- 
ed so that they can carry out their missions. And that is the goal 
and that is what we do. 

Mr. Nugent. Okay. Well, I think we have beat that up enough. 

I appreciate it. Madam Chair. I yield back. 

The Chairman. I thank the gentleman. 

The Chair recognizes the gentleman from California, Mr. Vargas. 

Mr. Vargas. Thank you very much. Madam Chair. A pleasure to 
be here again. 

You know, I always measure things in a very basic way: How 
many complaints do you get versus how many compliments do you 
get on something. And I have to say the Library of Congress is very 
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skewed. I get lots and lots of compliments, very few complaints, the 
truth of the matter. Most people are very, very happy with the Li- 
brary of Congress and the work they have been doing, and I want- 
ed to say that publicly, because that is certainly what I have expe- 
rienced. It is not the case with other agencies and other things that 
we do in government. But certainly with the Library of Congress 
it has been very skewed on the compliment side. Again, I wanted 
to say thank you for that. 

I also, though, wanted to say this. Madam Chair, when you men- 
tioned the DMV, there was a little thing that went down my spine, 
and I remember in California we were redoing — I am from Cali- 
fornia — we were redoing the DMV in our IT processes. And I re- 
member after we spent about $200 million we gave up on that 
process and went back to the drawing board. And this was using 
a lot of those high-tech companies in California that were so expert 
supposedly on this. So again, the IT can be a real nightmare and 
I am very conscious about that. 

But I was happy to hear from GAO, and I would like to question 
you a little bit further on this, and I don’t want to put words in 
your mouth, but when I first heard you describe some of your rec- 
ommendations I thought that you were leaning more on the nega- 
tive side. Then you used the words tremendous progress were being 
made, especially in information security. Could you go a little deep- 
er in that? Because, again, I thought that was very positive. 

Mr. WiLLEMSSEN. In my opening remarks, in the oral statement, 
I summarized primarily the results of our March report. Since that 
report, we have found the Library to be very responsive to our rec- 
ommendations and they have made excellent progress. There is a 
lot more to do. I think the Library was probably a little overly opti- 
mistic in thinking they were going to complete between 12 and 15 
recommendations by September 2015. It is going to take a little 
longer than that, especially to see evidence of the implementation 
of the recommendations. 

Even though it may seem that we are in somewhat of an adver- 
sarial position, I feel like we have had a very constructive relation- 
ship, that we are all after the same thing, to try to make IT man- 
agement better. I think along the way we can save some money 
and make things more efficient, and then also focus on the mission- 
critical needs of some of the service units like the Copyright Office. 

Mr. Vargas. Excellent. Well, let me ask you a further question 
then. So you are saying that they have made excellent progress but 
they were a little overly optimistic. Where do you think the prob- 
lems are going to come from for this overly optimistic view that 
they have? 

Mr. WiLLEMSSEN. Well, I think the reality of this is the central 
provider of services and service units, they are going to have to 
reach agreement on who is going to do what. I think that is going 
to not be an easy process. 

Mr. Vargas. Do you give recommendations for that? 

Mr. WiLLEMSSEN. We generally do. I mentioned the term com- 
modity IT a little bit earlier, and that is distinct from mission-crit- 
ical systems like some of the systems that the Register mentioned. 
Commodity IT includes items such as laptops, cell phones, human 
resource systems, financial management systems, servers, data 
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centers. Those are usually within the purview of the Chief Informa- 
tion Officer. 

When it comes to mission-critical systems, like replacing eCO 
and all of its associated systems, the business side needs to take 
the lead in defining those requirements and then turn it over to IT, 
whether it is internal or to a contractor, and say, “Here is what I 
need. Give me your solutions. Tell me what you can give me in re- 
turn.” 

Those requirements, that is really with the Register and her 
team to lay out — this is what we want the new system and the new 
process to look like. For example, this is what kind of availability, 
what kind of security, what kind of performance we want it to 
have. 

Mr. Vargas. Okay. Well, again, I don’t want to put words in your 
mouth, but I think you said that you had a very constructive rela- 
tionship with them. So I hope that constructive relationship con- 
tinues and you give some guidance on these issues. 

Mr. WiLLEMSSEN. That is just my view. I am not speaking for the 
other two witnesses here. 

Mr. Vargas. I don’t see them jumping up and saying no, so I will 
take that as an affirmation. 

And lastly, again, I would say that I appreciate the work that the 
Library does. I personally have been very, very impressed with the 
work. 

And, again, thank you. Madam Chair. I appreciate the time. 

The Chairman. Thank you. 

The Chair recognizes Mr. Davis, from Illinois. 

Mr. Davis. Thank you. Madam Chairman. 

I will not follow up my colleague’s question to get a response 
from you about working together with Mr. Willemssen. I too as- 
sume that you guys have a great working relationship. 

It is also interesting to note that most of the discussion here cen- 
ters upon the Federal Government’s inability to develop better IT 
practices. You are certainly not the only one that is affected by this 
in the Federal Government. And I think we do need to shine a light 
and make it a little more noticeable and put better practices in 
place. 

And, Ms. Pallante, I would like to mention, you know, obviously 
one of the key issues for you and for us is ensuring public avail- 
ability of the records that you are tasked with keeping. And I know 
there is much more work to be done to put that modern techno- 
logical infrastructure in place. And I do believe from some of the 
comments we heard today that, and most of you will agree too, the 
government is not the only entity that can fix this problem. 

And without objection, I would like to ask unanimous consent to 
submit a statement from the Internet Archive into the record. 

The Chairman. So ordered. 

Mr. Davis. Thank you very much. Madam Chairman. 

I would like you to take a look at this if you have not yet seen 
it, some of their recommendations that can help maybe make some 
progress in what we are discussing here today. 
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But my first question, Ms. Pallante, are you looking at any pri- 
vate resources or capabilities to fill the gaps in services or areas 
that the Copyright Office cannot support at this time? 

Ms. Pallante. Absolutely. 

Mr. Davis. You leveraged some of these resources? 

Ms. Pallante. Yes. Copyright law is incredibly intertwined with 
technology. Copyright law has traced technology since 1790, right, 
from the printing press to our iPhones. So the entire copyright eco- 
system that we serve are already technology experts. That stake- 
holder group we would like to have more involvement in the under- 
lying systems that serve them. 

So I guess, going back in time, what I would suggest probably 
was a mistake is not putting out the IT plan that has so fundamen- 
tally affected our customers, right? There is nothing that the Copy- 
right Office does that isn’t a public process. We operate under the 
APA. We have to. Courts, you know, have to rely on our opinions, 
et cetera. 

So, oddly, the operational infrastructure that is under the entire 
act of copyright administration was an agency decision internal. 
And, again, I think for us to be able to have technology advisory 
committees, to be able to have flexible Federal contracting, that 
we — again, another service that we get from the mothership but 
which hasn’t worked that well for us — we need much better sup- 
port in those areas. We need to be able to have short-term and 
long-time hires, both, to have state-of-the-art expertise. We need to 
be able to have interoperability between private sector standards 
and government sectors, otherwise copyright law won’t work. So all 
of that is in our plan. 

Mr. Davis. So that is in your plan. I like the connotation of the 
mothership. I haven’t heard that in many hearings. It is interesting 
to get it on your side rather than our side. 

I appreciate your candor. And I know you have made rec- 
ommendations in your testimony, you have made recommendations 
just now. What question haven’t we asked you that you feel needs 
to be answered that can get us to the point where you come in and 
sit at that table and talk to us about the IT successes and talk to 
us about how eCO or the next generation of eCO is working well? 

Ms. Pallante. Well, thank you for that question. The question 
you haven’t asked me is — I guess the question I would ask you is 
why should our copyright customers feel satisfied by a renewed 
commitment to the same central process that just failed us so mis- 
erably? 

What we are asking for is the autonomy to make sure that IT 
is intertwined with our business and legal expertise. Quite frankly, 
even if Bud Barton, who is tremendous, and Doug Ament, my CIO, 
can agree that ITS, which is the Library’s IT department, will be 
more responsive, will have better staff, they are still serving seven 
departments that have nothing to do with the Copyright Office. 
They are Library departments. It is a very different mission. 

And it is really odd to me as the Register that everybody reports 
through the Register’s office, the general counsel, the policy ex- 
perts, the registration experts, the recordation, all the business ex- 
perts, except the IT, which is somewhere else reporting to someone 
else. 
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And so how do we train them in mission? How do we keep them 
integrated so that that it is not separated? Because it is not only 
that it hasn’t worked well, it has been a failure, a complete failure. 
And so that just can’t work in the future. I don’t see any way it 
is going to work. 

Mr. Davis. Well, thank you. I look forward to working with all 
three of you to work with you toward those successes. So thank 
you. 

I yield back. 

The Chairman. I thank the gentleman. 

The Chair recognizes Mrs. Comstock. 

Mrs. Comstock. Thank you. Madam Chairman. 

I too, like Mr. Vargas, appreciate the great work of the Library 
of Congress. I am the daughter of a librarian, so I love my libraries 
and appreciate all the things we are doing there. 

But I am sort of baffled by the sort of the antiquated, I think you 
called it, Ms. Pallante, the 19th century system that we have here. 
And, you know, I noted in your testimony you talked about how 
really it was always intended to be separate, and instead of having 
that autonomy that you need to do your job, we have made it more 
top-down, mothership kind of orientation, which is sort of against 
everything we are all doing these days. The reason we all have our 
own personal phones and things is we still like having flexibility 
whenever our needs demand. 

So I am very interested in making sure, given the important eco- 
nomic driver that you are having, I think there are two very dif- 
ferent missions here. The Library of Congress is our history, it is 
Thomas Jefferson. I am from Virginia, I love our Library. But you 
are very tied to this huge international economy. And the idea that 
for 9 days you were down, I just am baffled as to — I mean, 9 hours 
I would be tearing my hair out. Nine minutes, most of us would 
be demanding answers. So for 9 days, that just is clearly a system 
that is not working. 

So I just wanted to maybe expound a little bit more upon how 
we can make what I think is an outmoded and inefficient system 
for you work so that we make sure this important economic driver 
in our economy is going to be maximized to the need, as it should 
be, and what maybe legislative changes or anything we might need 
to do to make sure you are making the most of this great economic 
driver in our economy. 

Ms. Pallante. Thank you so much for that. I think that the 
Copyright Office wants a long-term relationship with this com- 
mittee. We want to be able to put forward suggestions for all kind 
of things on operations. 

But the area where we really disagree, the Copyright Office and 
the Library, and it was referenced by my colleague and boss David 
Mao, is in duplication of IT services. So that is designed — and, 
again, putting aside the conflation of the two missions over time, 
which was really done for operational savings and goes, I think, 
against the reason that Congress created the office. 

The duplication of services can’t mean that there is only one CIO, 
that that CIO makes all decisions with respect to the national 
copyright system, because de facto IT will affect the outcome of the 
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system. And it can’t mean that we can’t develop our own staff of 
technology experts on data to work in our business units. 

I, frankly, think about a third of our staff has to morph into tech 
and data expertise. It used to be cataloguers. Now it needs to be 
technology and data. I don’t know how we can administer the law 
without it. 

And so when you are looking at duplication of IT and you are 
trying to save money, don’t do it at the expense of the copyright 
system. And I think that is really where the real tension is. 

Mrs. Comstock. Thank you. And I yield back. 

The Chairman. The Chair recognizes Mr. Walker. 

Mr. Walker. Thank you. Madam Chairwoman. A pleasure to be 
here today. 

I would say that one of the great advocates that you have in Con- 
gress on the Library of Congress is Representative Gregg Harper. 
I know he just stepped out. But he loves you guys. He is always 
talking well and always advocating on your behalf So a little 
kudos for the work to Representative Harper on that. 

Obviously, we have got to get to the 21st century when it comes 
to technology. We can’t be keeping score with an abacus anymore. 
Obviously, with the cyber threats and some of the things that we 
are seeing, serving on Homeland Security and some of the other 
committees that I have a role, and it is specifically going after some 
of the things that we are seeing, whether it is state sponsored, 
whether they are criminally driven, whatever it might be. And I 
think we have got to do a much better job long term on it. 

A couple questions that I have. Let me start with Mr. Mao, if I 
could, please. 

According to the GAO’s report, apparently the Library did not 
know how much it was spending on IT. Can you tell me what is 
the Library doing to make sure that is clearly communicated? I 
think it is a very important point. 

Mr. Mao. Yes. And so we have instituted some processes this 
year that we have just started with this current fiscal year, 2016, 
to make sure that we can track our investment expenditures. And 
we are going to continue to develop that so that we can continue 
to have a better handle on what our investment expenditures are 
going forward. 

Now, that said, we are also working with the Library’s Inspector 
General and working on identifying better ways for us to further 
refine the categories in our financial management system so that 
we can better track some of those. 

Mr. Walker. You agree, you see why that is important, I would 
imagine, you see why that is important for people to know that you 
guys are confident in knowing how much money is going in there. 
Is that something that 

Mr. Mao. Yes, indeed. 

Mr. Walker. Okay. Your confidence level in the Library’s ability 
to monitor its systems and protect itself against external threats. 
One challenge I was reading and the GAO noted in its report was 
the Library had not conducted complete security testing, stating 
that the Library had installed continuous monitoring, but that 
guidance to service units on how out this policy and regularly car- 
rying out the testing had not always occurred. Can you speak to 
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that and maybe to any improvements the Library has made specifi- 
cally in that realm? 

Mr. Mao. Yes. And since that recommendation has come out we 
have indeed moved forward with training staff, for example, that 
you mentioned, so that we ensure that they understand what the 
policies are and what it is that they must do to ensure the safe- 
ty — 

Mr. Walker. Kind of working together. Just having the informa- 
tion and knowing what to do with it is very important. 

Mr. Mao. Yes. 

Mr. Walker. Okay. Thank you, Mr. Mao. 

Ms. Pallante, I noticed that some of the records from the Copy- 
right Office are still in paper form. I don’t know if you could put 
an exact number, but what would the value be if this information 
was maybe taken from paper form and put into digital form? I 
would imagine some of this is very important documents. 

Ms. Pallante, Yeah. Well, there are two pieces to that. The 
value, to answer your question, would be enormous to the economy, 
to culture, to research. 

Mr. Walker. Can you try that mic again one more time? 

Ms. Pallante. The value would be enormous, to the economy, to 
culture, to research. There are two pieces, though. One is historic 
records that stop in 1978. Those are plausibly important to com- 
merce, but they are old, right? They are much more interesting for 
statistical research and following trends and identifying data 
rights. 

The piece that is still paper that is unforgivable is that the rec- 
ordation system itself, the process where you come as a company 
or an international business and record your security interest, or 
your copyright interest in major motion pictures, or in software, 
that is still paper-based, which means that people submit it — we 
have moved now to thumb drives — staff then retype it. Then there 
is a verification activity. And that needs to be automated. 

We have done two major reports on that. And the question is, 
who is going to bring it online? Who is going to have the invest- 
ments? Where are those going to be directed, to the Library or to 
the Copyright Office in some kind of partnership? How is it going 
to work? 

Mr. Walker. That is a great question. Thank you, Ms. Pallante. 

With that. Madam Chair, I yield back. 

The Chairman. I thank the gentleman. 

I thank all the witnesses for being here today. This Committee 
hasn’t had a hearing on the copyright for quite some time, but cer- 
tainly the GAO report sparked everybody’s interest and attention. 
You can see by the participation that we have had here today that 
there is a great amount of interest from this Committee and a huge 
reservoir of good will toward the Library from every Member of 
Congress, certainly every member on this Committee as well. 

On the other hand, one of my favorite sayings is the largest room 
is the room for improvement. We have a very large room for im- 
provement, particularly with IT for the Copyright Office. I think es- 
pecially when you think of what a critical component it is, an impe- 
tus for the economy, goodness. 
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So I hope you will look at this Committee as a vehicle to help 
resource you and help advocate for what you need to he able to do 
there and not wait for us to ask the question. Please feel free to 
come forward with recommendations that you have on the kinds of 
challenges that you are facing and what you need. Just because 
you don’t hear from us, or because we have a hearing, let’s face it, 
we probably didn’t ask you all the questions you thought you were 
going to get asked. We asked ones that you never thought you were 
going to get asked maybe. So if we didn’t ask the right question, 
let us know about that. 

Without objection, all Members will have 5 legislative days to 
submit to the Chair additional written questions for the witnesses 
that they might have that we will forward and ask you to respond, 
because I am sure all of us will have some. 

[The information follows:] 
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Febmary I, 2016 


David S. Mao 

Acting Librarian of Congress 
The Library of Congress 
101 Independence Ave. SE 
Washington, D.C. 20540 

Dear Acting Librarian Mao, 

Thank you for testifying during the Committee on House Administration’s December 2, 20 1 5 Hearing 
on Improving Customer Service for the Copyright Community. The Committee requests you respond 
to additional questions that will be made part of the hearing record. Please provide your responses to 
the following questions to the Legislative Clerk, C. Maggie Moore (Maggic.Moore@maiI.house.gov ) 
with the Committee by March 7, 2016. 

1 . What progress is being made on service-level agreements between the Office of the CIO and 
the service units that clearly identify what is needed for core Library IT infrastructure, as well 
as mission-specific needs and capabilities? Is there agreement on what will be provided by each 
party? 

2. Some have suggested that Copyright data was at risk during the August/September outage. 

How many copies of this data does the Library maintain and in what form? How secure is that 
information, both from external threats, as well as from system failures? 

3 . Please provide an update on the status of GAO recommendations contained in the March 20 1 5 
review of Library IT systems and governance. 

4. Is the ACF now capable of supporting the business critical IT systems of the Library? Please 
identify which systems could be run from the ACF if a critical event occurred today in the 
Madison building. If any of the capabilities or capacity of these systems would be unavailable 
please document tliese limitations. 

5. Would there be benefit for the Library of Congress in participating in a combined off-site data 
facility for the Legislative Branch? What are the advantages and disadvantages compared to 
the current facility in the Madison building? 
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If you have any questions concerning this matter, please feel free to contact Brad Walvort on the 
Committee Staff at (202) 225-8281. Thank you again for your testimony. We look forward to hearing 
from you. 


Sincerely, 



Chairman 
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THE LIBRARIAN OF CONGRESS 


March?, 2016 

The Honorable Candice S. Miller 
Chairman 

Committee on House Administration 
U.S. House of Representatives 
1309 Longworth House Office Building 
Washington, DC 20515 

The Honorable Robert A. Brady 
Ranking Member 

Committee on House Administration 
U.S. House of Representatives 
1307 Longworth House Office Building 
Washington, DC 20515 

Dear Chairman Miller and R^iking Member Brady: 


Pursuant to the Committee’s request of February 1, 2016, 1 enclose my responses to additional 
questions that will be made part of the hearing record for the Committee’s December 2, 20 1 5 
hearing on Improving Customer Service for the Copyright Community. 


Please let me know if you need further information. 


Sincerely, 




David S. Mao 

Acting Librarian of Congress 


Enclosure 


Cc: Maria A. Pallante 

United States Register of Copyrights 


101 Independence Avenue. S.E. Washington, DC 20540-1000 Tel; (202)' 707-5205 Fax; (202) 707-1714 


E-mail: libofc^loc.gov 
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Library of Congress Responses to Additional Questions for the Record 

1. What progress is being made on service-level agreements between the Office of the CIO 
and the service units that clearly identify what is needed for core Library IT 
infrastructure, as well as mission-specific needs and capabilities? Is there agreement on 
what will be provided by each party? 

The Library of Congress CIO has proceeded with a phased approach to execute service level 
agreements (SLAs) with service units. Implemented in October 2015, phase one SLAs focused 
on commodity type, core services. Phase two, which began in January 2016, involves the 
creation of individual Memoranda of Understanding (MOUs) designed to satisfy service unit 
mission-specific IT requirements not covered by the SLAs. The MOUs provide a framework for 
identification of technology and service expectations between the service units and the Office of 
the Chief Information Officer (OCIO). These MOUs will promote communication and 
understanding of the level of services to be provided by the OCIO. Because this process 
involves a new collaborative approach working with the service units on their mission-specific 
needs, we anticipate the MOUs will be completed by June 1, 2016. 

SLA’s will be reviewed with the service units semi-annually in fiscal 2016, and annually 
thereafter. MOU’s will be reviewed annually or as needed. 

In concert with creating the Service Units MOUs, the OCIO also launched a project designed to 
completely overhaul its IT Service Catalog. This project will result in the delivery of a m^em 
service catalog modeled on best practices that displays IT services, descriptions, and service 
targets. In the future, all service units will be able to select hardware, software, and service 
needs from the catalog. Any needs not covered by existing catalog options will be covered by 
future MOUs. 

Finally, the OCIO continues to promote collegial and productive relationships at multiple levels 
of management and staff between the OCIO and the service units. 


2. Some have suggested that Copyright data was at risk during the August/September 
outage. How many copies of this data does the Library maintain and in what form? How 
secure is that information, both from external threats, as well as from system failures? 

The OCIO does not believe that copyright data was at risk during the August-September outage. 
The Library has asked the Office of the Inspector General to examine whether proper controls 
were in place and followed to preserve the integrity of system data. 

How many copies of this data does the Library maintain and in what form? 

There are four copies of the eCO data at all times. The Copyright eCo storage array in the 
Library’s primary computing facility (PCF) automatically and synchronously replicates data to a 
backup array at the alternate computing facility (ACF). This configuration ensures there are two 
copies of active Copyright data at all times. Additionally, there are tape backup procedures for 
the Copyright eCO data at the PCF as outlined below. These tapes are replicated to tapes at the 
ACF to ensure two copies of the backup are maintained. 
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• Daily changes (deltas) are written to tape backup. These tapes are saved until the next 
weekly backup. 

• Full backups of active Copyright eCO data are written weekly. These tapes are saved 
until the next monthly backup. 

• Full backups of active Copyright eCO data are written monthly. These tapes are saved 
for at least one year. 

• Full backups of static Copyright eCO files and systems are made quarterly. 

How secure is that information, both from external threats, as well as from system 
failures? 

The Copyright system, eCO, resides on hardware provided and maintained by the OCIO. The 
Library's Security Operations Center (SOC) and Focus Operations group constantly monitor all 
Library systems for signs of intrusions, and add signatures and rules to prevent attacks. The 
Focused Operations group performs intelligence gathering activities with the specific intention 
of enhancing detection and response efforts to advanced threats. The OCIO has also improved 
capabilities for detecting threats through the implementation of a virtual SOC with new security 
monitoring products and managed services. The Libraryls virtual SOC provider is the same 
provider as many of the other Legislative Branch agencies, including the House of 
Representatives. 

The OCIO and the Copyright Office have worked to ensure that eCO is scanned monthly as part 
of the Library’s continuous monitoring program implemented in 2015. This is a requirement 
based on National Institute of Standards Technology (NIST) guidance and an industry best 
practice. 

With the data provided by automated tools such as Security Analytics and the Nessus Security 
Center, the OCIO will be implementing additional fimctionality by Q4 fiscal 2016 that will 
enhance identification of external and internal vulnerabilities. Additionally, it will provide the 
ability to both simulate and conduct live penetration tests of the Library’s networks. 


3. Please provide an update on the status of GAO recommendations contained in the March 
2015 review of Library IT systems and governance. 

Attached is a tracking spreadsheet with updated status for each of the GAO recommendations. 


4 Is the ACF now capable of supporting the business critical IT systems of the Library? 
Please identify which systems could be run from the ACF if a critical event occurred today 
in the Madison building. If any of the capabilities or capacity of these systems would be 
unavailable please document these limitations. 

Since the August/September 2015 outage, the OCIO has worked to identify and address needed 
improvements at the ACF. Multiple hardware, networking, and security improvements have or 
are in the process of being implemented. Though further woric and testing is required, we have 
reasonable assurance that the hardware, software, and network infrastructure necessary to make 
these systems available at the ACF has been implemented. 
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Like the Library's PCF, our ACF is classified as a Tier I: Basic Capacity data center under the 
Uptime Institute’s rating system. Tier I infrastructure includes a dedicated space for IT systems; 
an uninterruptible power supply (UPS) to filter power spikes, sags, and momentary outages; and 
dedicated cooling equipment. For its recovery mission, the ACF would optimally operate from a 
Tier III: Concurrently Maintainable data center; Tier III configurations include redundant 
critical power and cooling paths and components so that each and every component needed to 
support the IT processing environment can be shut down and maintained without impact on the 
IT operation. Any configuration at less than Tier III classification presents inherent risks to our 
ability to run critical business systems. 

The ACF currently supports the following business critical systems at the Library. 


Congress.gov 

CRS.gov 

Electronic Copyright System (eCO) 

Law Library Management Information System (LLMIS) 

Law Library Critical Data 

Legislative Information System (LIS) 

Medical Information Management System (MIMS) 

Momentum Financial System 

System Management Information network (SYMIN) II 
WebTA 


The Library has also requested the Office of the Inspector General (OIO) to perform a review to 
determine the Library’s infi-astructure maturity for its critical systems and assess the Library’s 
technology and processes to provide high availability of those systems. This review includes 
benchmarking the Library’s current server and data center configurations that support critical 
systems against best practices and industry standards. In response to the OCIO request, the OIO 
has contracted with its consulting partner, HMS Technologies, Inc., to assist in conducting the 
assessment. The assessment is expected to be completed by the end of the second quarter, fiscal 
2016. 

Specific capabilities or capacity limitations of the support of these systems at the ACF are 
documented below. 

Manual Effort to Failover 

When created, the ACF was implemented as a “warm” disaster recovery site for the Library. As 
such, the ACF was architected to provide the technical capability (hardware, software, and 
connectivity) to support a recovery time objective (RTO) for the Library’s critical IT systems of 
24-72 hours. The ACF was not designed for instantaneous or automatic failover of those critical 
IT systems, and configuration changes must be manually implemented once the ACF has been 
activated in order to make critical IT systems available for general use. Since the ACF was 
designed, the Library has developed several additional critical systems; it is now not known 
whether the ACF could support all Library operations simultaneously in the event of an 
extended disruption to the PCF. The OCIO, in conjunction with Library leadership, evaluates 
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the Library’s disaster recovery requirements on an ongoing basis, and works to adjust its 
capabilities accordingly within resource consttaints. 

Testing 

Additional testing is required to determine if all critical systems could simultaneously run out of 
the ACF. The OCIO will be working in conjunction with the owners of critical IT systems to 
ensure that technical testing is performed in the next 24 months. Existing internet (speed and 
priority), wide area network fiber connections (capacity and performance), and firewall 
infrastructure must be further tested to determine the capacity for Library critical IT systems to 
operate out of the ACF for an extended period of time. 

Other Issues for Consideration 

Update on ACF IT Security Infrastructure: the OCIO committed funding in the fourth 
quarter, fiscal 2015 and submitted procurements required to enhance IT security at the ACF to 
support emergency operations. The equipment has been installed and is currently being 
configured to ensure proper visibility throughout the ACF network is secure. 

Recovery Procedures Documentation: the Library’s recovery procedures for critical IT 
systems require updating and additional documentation. The Library has an effort underway to 
frilly document the procedures required to recover all critical IT systems at the ACF. 


5. Would there be benefit for the Library of Congress in participating in a combined off-site 
data facility for the Legislative Branch? What are the advantages and disadvantages 
compared to the current facility in the Madison building? 

There would be benefit for the Library to participate in an off-site data facility. In its fiscal 2017 
budget request to Congress, the Library is requesting $24,575 million and three-year funding 
authority for the first year of a three-year investment of $57.7 million to migrate the Library’s 
Primary Computing Facility to a new Legislative Branch primary computing facility. The 
Library sees many advantages in moving to this offsite facility, including: 

• The proposed Legislative Branch facility is being built as a Tier III data center with ample 
power and cooling. This is significant improvement from the current PCF and ACF. 

• The proposed Legislative Branch facility is being built specifically for Legislative Branch 
agency requirements. 

• The proposed Legislative Branch facility will provide additional protection to critical 
business systems as well as the Library’s digital collections due to the greater distance from 
Capitol Hill. The additional distance would further protect the data from natural disasters 
and terrorist attacks. 

• The Library and other Legislative Branch Agencies would benefit through the consolidation 
of the primary CAPNET network connections between the agencies being within one 
building, similar to the CAPNET configuration at the ACF. 

• The new facility will provide centralized planning and standardization of facility design 
(floor space, power, HVAC, cabling) which will allow faster and more uniform deployment 
and upgrades of equipment within a shared data center. 
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If the Library cannot migrate computing and data resources to shared facilities or externally- 
hosted services away from the James Madison Memorial Building (JMMB) PCF, the Library’s 
IT capabilities and equipment will continue to be at risk from aging and inadequate data center 
facilities, including: 

• Failure of the Capitol Hill cooling facility to supply adequate cold air to the JMMB Data 
Center and related failure of the aging Computer Room Air Conditioning (CRAC) units; 

• Annual shut down of the Primary Data Center for the AOC-managed Life and Safety check, 
putting till Data Center equipment at higher risk of failure; 

• Generator failure during a general Capitol Hill electrical brown or black out; 

• Lack of cost-effective capacity growth for power and cooling requirements; 

• Downtime due to inadequate capacity for complete redundancy for all infrastructure services 
in the current facility. 
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tRirary of Congress 

Progress Update on GAO Reconimenr'at ions 







managing the library's IT and ensurethatthisoffWalhasdearfydefiRed responsibilities and 
adequate authority, consistent with the role of a dtief infwmation officer as defined by best 
oractice. The should include among other tMngs, (1) responsibHity for commodity IT; (2) 
oversight of mission-specific systems, thrwjgh d>e ITSC or another oversight mechanism; 
and (3} clarification of responsibilities and authwities between the library CfO and service 
unit IT leadership. 



2 

Complete an Information Technology strategic [rian wnthin ^ time frame the Ubrary has 
established for doing so. The plan, at a mininajm, should {!) afign witti the agency's overall 
Strategic Plan. (2) provide results-oriented goats and performance measures, (3) Identify the 
strategies for achieving Che desired results, and (4) describe interdependencies among 
projects- 

IOC Completed 
pending 

GAO Validation 

03 Fy2016 

3 

Establish a time frame for developing a corng^ete and reliabieenterprise architecture that 
accurately captures the Library’s current informatioo technology environment, describes its 
target environment, outlines a strategy for transitkming from one to the ofoer. and 
develops the architecture within the established time frame. 

Ongoing 

Q4 FY2Q18 


Establish a time frame for implem«)ting a Lil»'ary-vnde assessment of information 
technology human capital needs and compete tfie assessment within the eaaWished time 
frame. This assessment should, at a minimum, analyie any gaps between current skills and 
future needs and include a strategy for closing any identified gaps. 

Ongoing 

Qi FY2018 


Clarify investment management policy to identify which governance bodies are responsible 
far malting Investment decisions and under what coniStions. 

Ongoing 

Q1 fY2017 

6 

Establish and implement a process for linking Information technology strategic planning, 
enterprise architecture, and information technology investment management. 

Ongoing 

Ql FY2018 

7 

Establish arsd implement policies and procedures for reseleaing investments that are 
already operational. 

Ongoing 

Q4 FY2018 

8 

Establish and implement policies and procedures for ensuring that investment selection 
decisions have an impact on decisions to fund investments. 

Ongoing 

Q4 fY2018 

9 

Ensure that appropriate governance bodies review all investments that meet defined 
criteria. 

Ongoing 

Ql FY2018 

10 

Require Investments in development to submit complete investment data (i.e.. cost and 
schedule variances and risk management data) in quarterly reports submitted to the 
Information Technology Steering Committee. 

Ongoing 

Ql FY2018 

11 

fully establish and Implement policies to include guidance for Service Units on classifying 
expenditures as information technology, for maintaining a full accounting of die library's 
iflformation-technologv-related expenditures. 

Ongoing 

Ql FY2018 

12 

fully establish and Implement policies for developing a comprehensive inventory of 
information technology assets. 

Ongoing 

Ql FY20i7 

13 

Implement policies and procedures for conducting post-implemeniatloo reviews of 
investments. 

lOC Completed 
pending 

GAO Validation 

Ql FY2016 

14 

Fully establish and implement policies and procedures consistent with the key practices on 
portfolio management, including Jl) defining the portfolio criteria. (2) creating tfw portfolio, 
and (3) evaluating the portfolio. 

Ongoing 

Ql FY2018 


31/15 
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IMKary of f^gress 

Progress Utxiett on:GAO Rrar-rrendistion 


EBB 

-vA'l 'V v^' /,-> . ■ 


Expected Date .OC will 
provide to GAO 

1.7717218 


-Drrp.eta j. J .mp.srr.eit an orgar.izai.on vwdc policy for risk management that ncli.de? kcv 

practices as discussed in this report arxjxi^in the dme frame UieUbrary established for 
doing so. 


16 

Establish and implement an organization-wide policy for requirements development that 
includes key practices as discussed in this repon. 

Or'going 

Q1 m018 

17 

Establish and implement an organization-wide (Miicy for de^^o;^ cost estimates that 
includes key practices as discussed in this report 

Ongoing 

Q1 Fvaois 

18 

Establish a time frame for finaJizing and irt^iwnenting an organlzatloo-wMe policy for 
developing and maintaining project schedules that indude key practices as ^scussed in this 
report and finalize and implement the policy witlun^estaUished timeframe. 

Ongoing 

Q1 FY201S 

19 

Develop a complete and accurate inventory of the ageiKy's infwmation systems. 

Ongoing 

Q4 FY2016 

20 

Revise information security policy to require system security plans to describe common 
controls and Implement the policy. 

Ongoing 

Q1 Fy2017 

21 

Ensure that alt system security plans are complete, inchiding descriptions of how security 
controls are implemented and iustificatlws for why controb are not applied. 

Ongoing 

Q4 Fy2016 

22 

Conduct comprehensive and effective seairity testing for ail systems within the time frames 
called for by Library policy, inckiding assessing security controb d>at are inherited from the 
Library's information security program. 

Ongoing 

04 FY20I7 

23 

Ensure that remedial action plans for identified security weaknesses are conPstentty 
documented, tracked, and completed In a timely manner. 

Ongoing 

Q4 FY2016 

24 

finalize and implement guidance on continuous monitoring to ensure that officials are 
informed when making authorization decisions about (he risks associated with the 
operations of the Library's systems. 

LOC Completed 
pending 

GAO Validation 

03 FY2017 

2S 

Develop contingency plans for all systems that address key elements. 

Ongoing 

04 Fy2013 

26 

Establish and implement a process for comprehensively identifying and tracking whether all 
personnel with access to Library systems have taken required security and privacy trairting. 

Ongoing 

01 FV2017 

27 

Establish a time frame for finalizing and implementing the Library's standard contract 
seaions for information security and privacy requirements and finalize and implement the 
requirements within that time frame. 

LOC Completed 
pending 

GAO Validation 

Ol FY2016 

28 

Require the chief privacy officer to establish and implement a process for reviewing the 
Library's privacy program, incbding ensuring that privacy impact assessments are conducted 
for all information systems. 

Ongoing 

04 FY2016 

29 

Finalize and implement a Library-wide policy ter developing service level agreements (SLAs) 
that (1} includes service-level targets for agreements with individual Service Units, and (2) 
covers services in a way that best meets the need of both information technology and its 
customers, including individual Service Units. 

Ongoing 

Q4 FY2018 

30 

Document and execute a plan for im^eovlng customer satisfaction with informaiion 
technology services that includes prioritized improvement projects and associated resource 
requirements, schedules, and measurable goals and outcomes. 

Ongoing 

04 FY20i8 

31 

Conduct 3 review of the Library's information technology portfolio to identify duplicative or 
overlapping activities and investments, including those identified in our report, and assess 
the costs and benefits of consolidating identified informattott technology activities and 
investments. 

Ongoing 

03 FY2017 


12/3 i/tS 




128 


CANDICE S. MILLER, MICHIGAN 
Chairman 

GREGG HARPER, MISSISSIPPI 
RICH NUGENT. FLORIDA 
RODNEY DAVIS, ILLINOIS 
BARBARA COMSTOCK, VIRGINIA 
MARK WALKER, NORTH CAROLINA 

Sean Moran, Staff Director 


Conpetisi of ti^e tKnitefi 

^ansie of lleptestentattbes! 

COMMITTEE ON HOUSE ADMINISTRATION 
1309 Longwortti House Office Building 
Washington, D.C. 20515-6157 
(202) 225-8281 
http://cha.house.gov 


ROBERT A. BRADY, PENNSYLVANIA 
RANKING Minority Member 

ZOE LOFGREN, CALIFORNIA 
JUAN VARGAS, CALIFORNIA 

ONE HUNDRED FOURTEENTH 
CONGRESS 

Jamie Fleet, Minority Staff Director 


Febmary 1, 2016 


Maria A. Paliante 
Register of Copyrights 
The Library of Congress 
101 Independence Ave. SE 
Washington, D.C. 20540 

Dear Register Paliante, 

Thank you for testifying during the Committee on House Administration’s December 2, 20 1 5 Hearing 
on Improving Customer Service for the Copyright Community. The Committee requests you respond 
to additional questions that will be made part of the hearing record. Please provide your responses to 
the following questions to the Legislative Clerk, C. Maggie Moore ('Maggie.Moore@mail.house.gov') 
with the Committee by March 7, 2016. 

Questions from the Majority: 

1. During this year’s scheduled annual maintenance on the Madison building; most of the 
Library’s IT systems were not available, including the Electronic Copyright Office (cCO) 
system. What was your understanding of the capabilities of the Alternate Computer Facility 
(ACF) to support the needs of the Copyright Office? Please document any communications 
in which you or the Copyright CIO expressed concerns or requirements for a more robust 
availability strategy prior to the outage. 

2. Have you previously or since the 2015 Outage visited the LOC alternative computer 
facility? How would you assess its ability to meet the needs of the Copyright Office? 

3. Are you looking at any private resources or capabilities to fill gaps in services or areas that 
the Copyright Office cannot support at this time? How could the Copyright Office leverage 
outside expertise to address your challenges? 

4. Please identify IT needs that are not currently being met by the LOC. If the Copyright 
Office was permitted to seek IT services outside of the LOC, what capabilities would you 
prioritize first? Furthermore, are there innovative vendors or government providers that 
could provide the required solutions in a shorter timeframe such as GSA’s 18F? If so, what 
changes in LOC policies and regulations would be required for you to take beneficial use of 
such innovative capabilities? 

5. How has the Library and your office responded to prevent another major outage such as 
occurred in August/Sqptember of 201 5? Have you completed a formal Service Level 
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Agreement (SLA) with the Library to document your availability requirements for your key 
IT systems? What, if any, are the outstanding actions to prevent another outage and the 
status of these actions? 

6. A complete solution for the Copyright Office could involve private-public partnerships. 
Have you looked at creating an open computer Application Programming Interface (API) so 
that appropriate functionality would be available to the public, non-profits or the private 
sector? What capabilities should this encompass? 

7. Some of the records of the Copyright Office remain in paper form. What would the value 
be to the public if this information was correctly digitized and made available on-line? 
Would it be worth the cost and what cost estimates do you have to digitize the current paper 
records? Have you considered offers from non-profits to perform this task using crowd 
sourcing or other public-involvement strategies? 

8. In a March 23'^, 20 1 5 letter to Ranking Member Conyers you submitted testimony 
advocating for The Copyright Office to be independent of the Library of Congress. Please 
provide the Committee with copies of any and all communications sent by the Office of the 
Register on official or unofficial email or correspondence, in which you suggest, advocate 
or discuss a Copyright Office independent of the Library of Congress. Exclude any legally 
protected communications with Members of Congress and their staffs. 

9. Please provide the Committee with the time and date of meetings with the Librarian, 

Acting Librarian, Library CIO or other LOC leadership in which you or the Copyright 
Office CIO discussed Office of Register of Copyrights computer or technology needs since 
January 1, 2014. 

10. Please provide to the Committee the detailed plan on necessary IT upgrades, a cost estimate 
for the full modernization effort, and a funding strategy with a time frame for completion. 
The expectation is that the requirements set forth in House Report 114-1 10 will formalize a 
plan that all stakeholders can work from to ensure that funds are being used effectively. 

Questions from the Minority: 

1 1 . What are the details of the hiring process at the Copyright Office (Copyright)? 

12. What are the current staffing levels? How many FTEs is Copyright currently authorized to 
employ? How many FTEs does Copyright currently employ? 

13. What is the organizational structure of Copyright? 

14. What is the size of your personal staff? 

1 5. Who makes up the Copyright senior staff? What are their credentials and qualifications? 

16. How much travel is required of the Register? Please list any travel performed in your 
official capacity including destination, duration, and total cost. 
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17. How much travel is required of Copyright’s senior staff? Please list any travel performed in 
their official capacity including destination, duration, and total cost. 

1 8. To what extent do you consult and interact with members of any bargaining unit within 
Copyright? 

19. How are application fees determined? How much authority does the Register have when 
determining fees? 

20. In your opinion, is Copyright in a better or worse situation than when you were appointed 
Register? 

2 1 . How do you balance the various roles Copyright plays with respect to the size and varied 
interests of its stakeholder community? 

22. In your plan to modernize Copyright, is job loss expected and if so, in what areas? 

23. If Copyright did end up as an independent agency, what impact would that have on the 
copyright customer base during the transition period? 

24. In FY 201 5 Copyright transferred to the Library of Congress over 600,000 items worth 
approximately 30 million dollars. If Copyright becomes an independent agency, how will 
its deposit material be made available to the Library of Congress? 

25. The Library acquires most of its “best edition” copies through copyright registration. If 
Copyright moves to only require an “examination copy", what would be the impact on the 
Library of Congress collections and its mission to serve the American people and 
Congress? 

26. What are the shared interests between Copyright and the Library of Congress? How could 
they be improved? 

27. What services besides FT are currently provided by the Library of Congress to Copyright? 

28. Under acting Librarian David Mao and new CIO Bud Barton, work has begun to address 
the many IT issues detailed in the 20 1 5 GAO reports. What coordinated steps are being 
taken by Copyright and the Library to remedy technology issues? 

29. How would you characterize the cooperation between Copyright and the Library of 
Congress in all facets of operations, not just with regard to IT? 

30. You have stated that Copyright is constrained because it cannot retain and use all of its 
revenue and receipts. If Copyright had autonomy over its funds and spending, how would it 
impact your appropriation? 

3 1 . In 2007, Copyright moved from its paper-based registration process to the eCO 
system. You have testified that eCO is antiquated. Please tell us: 
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A. What new system is required to modernize current business areas, specifically 
registration and recordation? What will it cost? 

B. Assuming adequate funding, how long do you estimate it will take to design, build, 
and test a new system? 

C. In Copyright and in the Library of Congress, how many technology staff currently 
support eCO? How many full-time technology staff would be required to support 
and maintain a new system? 

D. How will you ensure that the same mistakes are not repeated when you build the 
next system? 

E. How do you plan to keep pace with rapidly changing technology and customer 
demands? 

If you have any questions concerning this matter, please feel free to contact Brad Walvort on the 
Committee Staff at (202) 225-8281. Thank you again for your testimony. We look forward to hearing 
from you. 


Sincerely, 



Chairman 
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The Register of Copyrights of the United States of America 

United States Copyright Office • lOJ Independence Avenue SE • Washington, DC 20559-^000 • {202)707-8350 


March 7 , 2016 


The Honorable Candice S. Miller 
Chairman 

Committee on House Administration 
U.S. House of Representatives 
1 309 Longworth House Office Building 
Washington, D.C. 20515 

The Honorable Robert A. Brady 
Ranking Member 

Committee on House Administration 
U.S. House of Representatives 
1307 Longworth House Office Building 
Washington, D.C. 20515 

Re: Questions for the Record Reading the December 2, 2015 Hearing 

Improving Customer Service for the Copyright Community 

Dear Chairman Miller and Ranking Member Brady; 

As requested, please find enclosed the written responses to your February 1, 2016 letter 
containing questions for the record for the above-referenced hearing. In addition, we include 
several documents that provide relevant information. 

Respectfully submitted. 


Maria A. Pailante 

Register of Copyrights and Director 
U.S. Copyright Office 


Enclosures 

cc: David S. Mao 

Acting Librarian of Congress 
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U.S COPYRIGHT OFFICE 
Library of Congress 

Responses to Questions for the Record Regarding December 2, 2015 Hearing 

March 7, 2016 

Committee on House Administration 

United States House of Representatives 

Questions from the Majority 

1. During this year’s scheduled annual maintenance on the Madison building, most of 
the Library’s IT systems were not available, including the Electronic Copyright 
Office (eCO) system. What was your understanding of the capabilities of the 
Alternate Computer Facility (ACF) to support the needs of the Copyright Office? 
Please document any communications in which you or the Copyright CIO expressed 
concerns or requirements for a more robust availability strategy prior to the outage. 

The Copyright Office relies on the Library’s ACF as a failsafe backup for both operations 
and disaster recovery. During summer 2015, the Copyright Office wanted to run 
continuity operations from the ACF to avoid taking customers offline during the planned 
Architect of the Capitol testing. Late in the planning proeess, the Library informed the 
Copyright Office, however, that the Library had not provided adequate security controls 
necessary to run operations through the ACF, and stated that the Library would have to 
make improvements before the ACF eould function appropriately, whether during 
planned outages or emergency situations. Since last summer, the Copyright Office Chief 
Information Officer has been in contact with the Library’s Chief Information Officer 
regularly to discuss security issues; the Library agrees that the ACF is not yet ready to 
provide continuing operations. Additionally, during the outage, the Copyright Office 
became increasingly concerned about whether and to what degree copyright data was at 
risk and is pleased that the Library Inspector General is now reviewing the Library’s 
protocols for validating and testing data. 

2. Have you previously or since the 2015 Outage visited the LOC alternate computer 
facility? How would you assess its ability to meet the needs of the Copyright Office? 

The Copyright Office’s Chief Information Officer and Chief Operations Officer jointly 
monitor the ACF, which they both have visited, and provide regular feedback to the 
Library. The Copyright Office initiated a major upgrade of eCO and conducts annual 
disaster recovery testing for the limited processes within its control. The Library 
manages the infrastructure components of the ACF, including security, which continues 
to be a core point of discussion for both offices. If the security shortfalls were remedied. 
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the Copyright Office technical presence would be folly capable of running the existing, 
primary line-of-business application, eCO, at the ACF. 

3. Are you looking at any private resources or capabilities to fill gaps in services or 
areas that the Copyright Office cannot support at this time? How could the 
Copyright Office leverage outside expertise to address your challenges? 

The Copyright Office is looking at a variety of private resources to fill gaps in services. 
As set forth in the Copyright Office’s recently released Positioning the United States 
Copyright Office for the Future: Strategic Plan 2016-2020 (Strategic Plan), the Office 
should have business-to-business capabilities that both leverage and support private 
sector activities, while ensuring and facilitating transparency and fairness. This would 
include using innovative third-party tools, software programs, registries, and other 
business models that are interoperable with the Copyright Office’s records and 
underlying data. Additionally, the Copyright Office likely will explore interrelating 
Copyright Office records with third-party registries and databases. As more folly set 
forth below, the Copyright Office has discussed Application Programming Interface 
(API) capabilities with stakeholders, which would be beneficial to the public at large. 

4. Please identify IT needs that are not currently being met by the LOC. If the 
Copyright Office was permitted to seek IT services outside of the LOC, what 
capabilities would you prioritize first? Furthermore, are there innovative vendors 
or government providers that could provide the required solutions in a shorter 
timeframe such as GSA’s 18F? If so, what changes in LOC policies and regulations 
would be required for you to take beneficial use of such innovative capabilities? 

The Copyright Office’s IT and data requirements are explained in its Strategic Plan and 
the recently released Provisional Information Technology Modernization Plan and Cost 
Analysis (Provisional IT Plan). These documents build upon several focused studies that 
incorporated public comments. Both plans suggest using government vendors for a 
variety of services, from providing cloud services to assisting with application 
development. In the Provisional IT Plan, we explain the importance of 24-hour, 7-day-a- 
week support and availability, the creation of business-to-business models, and redundant 
security. A modem system would require an investment in an overall structure that also 
enables management of Copyright Office IT directly by Copyright Office staff, who are 
most familiar with the needs of Copyright Office staff. Copyright Office customers, and 
public demand for Copyright Office services. That said, there is and should be 
appropriate coordination and/or collaboration with the Library on these issues. 
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5. How has the Library and your office responded to prevent another major outage 
such as occurred in August/September of 2015? Have you completed a formal 
Service Level Agreement (SLA) with the Library to document your availability 
requirements for your key IT systems? What, if any, are the outstanding actions to 
prevent another outage and the status of these actions? 

The Copyright Office was extremely concerned about the 2015 outage because the 
Copyright Office had no control over the security of the copyright data for which it is 
statutorily responsible, and because neither the public nor Copyright Office employees 
could access copyright portals, databases, or applications. Since the outage, the 
Copyright Office has had ongoing communications with the Library about the need for 
increased security at the ACF and backup protocols. We also have been testing the 
ACF’s disaster capabilities, which we just completed in February. The Copyright Office 
does not, however, control the infrastructure on which copyright systems are placed, and 
thus we are limited in how much we can do to alleviate the security concerns at the ACF. 
The Library itself is engaged in its own analysis and work regarding the outage, with 
which we are happy to coordinate to the extent possible. 

The Library presented a draft SLA to the Copyright Office last fall, but then withdrew the 
proposal because it lacked sufficient detail and required discussion. The Copyright 
Office looks forward to working with the Library regarding each entities’ respective 
duties and the current and future IT states. 

6. A complete solution for the Copyright Office could involve private-public 
partnerships. Have you looked at creating an open computer Application 
Programming Interface (API) so that appropriate functionality would be available 
to the public, non-proflts or the private sector? What capabilities should this 
encompass? 

The Copyright Office has embraced the idea of using APIs to ease transactions, 
coordinate with data from outside sources, and provide better access to Copyright Office 
records. In the Copyright Office’s 2015 Technology Upgrades Report, a team led by the 
Copyright Office CIO recognized the value of APIs and recommended that the Copyright 
Office pursue APIs that would allow batch processing or business-to-business 
transactions. The Strategic Plan also recommends using innovative third-party tools, 
software programs, registries, and other business models that are interoperable with the 
Copyright Office’s records and underlying data. Most recently, the Provisional IT Plan 
explores how to develop a system that would incorporate APIs. 
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7. Some of the records of the Copyright Office remain in paper form. What would the 
value be to the public if this information was correctly digitized and made available 
on-line? Would it be worth the cost and what cost estimates do you have to digitize 
the current paper records? Have you considered offers from non-profits to perform 
this task using crowd sourcing or other public-involvement strategies? 

At this time, some older records are only available in paper, some are unique to the 
Copyright Office archive, and some are available elsewhere. Working within budget 
constraints, the Copyright Office has digitized the vast majority of its records - 35.8 
million cards and all 669 Catalogs of Copyright Entries (which provide limited 
information on copyright registration records from 1891 to 1977) - with the exception of 
copyright records in bound books from the 1 870s to the 1920s. Those older records are 
delicate and preservation is paramount, thus requiring the Copyright Office to exercise 
considerable care in converting them into a digital format. Post- 1978 records already are 
accessible online, and the Copyright Office has prioritized making available records from 
1971 to 1977. The Copyright Office has been assisted by the non-profit Internet Archive 
in reviewing the quality of the scans of the Catalogs of Copyright Entries, which are now 
available online. The OCR review, necessary for accuracy, could well be a good 
candidate for crowdsourcing and we are currently reviewing crowdsourcing methods 
used by other entities, including the New York Public Library and NASA. Due to the 
breadth of this project, we will not have a final cost estimate until the Provisional IT Plan 
is assessed and funded because part of the overall cost includes incorporating details of 
records into the government database and search functions, which must still be finalized. 

8. In a March 23rd, 2015 letter to Ranking Member Conyers you submitted testimony 
advocating for the Copyright Office to be independent of the Library of Congress. 
Please provide the Committee with copies of any and ail communications sent by the 
Office of the Register on officiai or unofficiai emaii or correspondence, in which you 
suggest, advocate or discuss a Copyright Office independent of the Library of 
Congress. Exclude any legally protected communications with Members of 
Congress and their staffs. 

During a February 2015 House Judiciary Committee hearing with private sector 
witnesses. Ranking Member Conyers requested that the Register respond to the testimony 
of the witnesses, specifically “whether and how reorganizing the Copyright Office would 
benefit the copyright community.” Thus, the Register addressed the issue of legal 
independence at the Ranking Member’s direction and in the context of complex, nuanced, 
and ongoing deliberations about the Nation’s copyright system.' The Register’s letter 


' The House Judiciary Committee has held almost two dozen hearings since 2013 on the copyright system, including 
an oversight hearing and hearings on the state of copyright law and the Copyright Office’s functions and resources. 
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addressed the pros and cons of three proposals put forward by the witnesses, and 
analyzed a combination of constitutional, statutory, and regulatory issues. The Register 
concluded that the statutory separation discussed at the hearing would best ensure the 
Copyright Office’s expert and impartial duties under the Copyright Act. As requested, 
the letter also discussed the benefits and concerns of the Copyright Office remaining 
within the Library or moving to the Department of Commerce. A copy of the letter is 
included for your convenience. This review of the copyright system - including the 
Copyright Office - is an important part of the functioning of copyright law. As 
requested, enclosed are all outside non-congressional communications located that were 
sent by the Office of the Register and are responsive to your inquiry, as well as an all- 
staff update sent by the Office of the Register that may have been received by outside 
parties. 

9. Please provide the Committee with the time and date of meetings with the 
Librarian, Acting Librarian, Library CIO or other LOC leadership in which you or 
the Copyright Office CIO discussed Office of Register of Copyrights computer or 
technology needs since January 1, 2014. 

Technology has been a central point of discussion between the Register’s Office and the 
Librarian’s Office over the past several years. Most of the Register’s meetings have been 
with the Librarian or Acting Librarian, though she also meets with the Library’s Chief 
Information Officer and Chief Financial Officer regarding particular issues. Executives 
and staff in the Copyright Office and Library of Congress have long had standing weekly 
and monthly meetings regarding the Copyright Office’s technology needs. Currently, 
these meetings include: Copyright Office CIO staff meet with the Library of Congress 
CIO staff weekly regarding operations; the Copyright Office CIO and Library CIO have 
monthly security meetings with the Library CIO security groups; the Copyright Office 
CIO or Chief Operating Officer attend monthly security review meetings that include 
Library CIO staff; there is a weekly configuration control board meeting held by the 
Library that the Copyright Office CIO attends; and the Copyright Office CIO sits on the 
Library IT Steering Committee, which is chaired by the Library CIO and reviews 
proposed technology initiatives. 

10. Please provide to the Committee the detailed plan on necessary IT upgrades, a cost 
estimate for the full modernization effort, and a funding strategy with a time frame 
for completion. The expectation is that the requirements set forth in House Report 
114-110 will formalize a plan that all stakeholders can work from to ensure that 
funds are being used effectively. 

The Copyright Office delivered copies of the Provisional IT Plan to the Chairman of the 
House Committee on Administration on February 29, 2016. Public questions regarding 
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funding are currently outstanding. The relevant documents also may be found on the 
Copyright Office website at http://copyright.gov/reports/itplan/technology-report.pdf and 
http://copyright.gOv/fedreg/2016/81frl0672.pdf. 

Questions from the Minority 

11. What are the details of the hiring process at the Copyright Office (Copyright)? 

The Copyright Office is subject to the policy described in LCR 2010-14 Merit Selection 
and Employment, relevant provisions of negotiated collective bargaining agreements, and 
procedures described in the Library’s Merit Selection Plan for Senior-Level Hiring and 
Merit Selection Plan (GS-15 and below) for all permanent and temporary appointments. 
The Library’s Human Resources Services is responsible for administering LCR 2010-14, 
maintaining the Merit Selection Plans, publishing vacancies, and making official offers. 

12. What are the current staffing levels? How many FTEs is Copyright currently 
authorized to employ? How many FTEs does Copyright currently employ? 

The Copyright Office has an FTE ceiling of 500 FTEs in 2016, covering several line 
items, As of pay period 2 of 2016, the Office employs 368 FTEs in the basic Copyright 
positions, 21 FTEs in the Licensing Division, and 6 in the Copyright Royalty Judges. 

The Copyright Office currently is unable to fill all 500 FTE allocations due to lack of 
funding. 

13. What is the organizational structure of Copyright? 

The Copyright Office is one of seven departments in the Library of Congress. The 
Copyright Office is headed by the United States Register of Copyrights, who directs and 
oversees seven divisions: Office of the General Counsel and Associate Register of 
Copyrights (OGC); Office of the Associate Register of Copyrights and Director of Policy 
and International Affairs (PIA); Office of the Associate Register of Copyrights and 
Director of Registration Policy and Practice (RPP); Office of the Associate Register of 
Copyrights and Director of Public Information and Education (PIE); Office of the Chief 
Information Officer (OCIO); Office of the Chief of Operations (OCOO); and Office of 
Public Records and Repositories (PRR). The Copyright Office’s complete organizational 
structure is set forth in the attached organizational chart, which also is available on the 
Copyright Office website at http://copyright.gov/docs/c-71 1 .pdf. The Copyright Office 
divisions correspond to the Register’s statutory duties under the Copyright Act, 
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14. What is the size of your personal staff? 

The Register does not have a designated personal staff. The Office of the Register is 
comprised of the Register, a Senior Advisor, and a confidential assistant. 

15. Who makes up the Copyright senior staff? What are their credentials and 
qualifications? 

In addition to the Register, the senior staff of the Copyright Office includes: Jacqueline 
C. Charlesworth, General Counsel and Associate Register of Copyrights; Karyn A. 
Temple Claggett, Associate Register of Copyrights and Director of Policy & International 
Affairs; Robert J. Kasunic, Associate Register of Copyrights and Director of Registration 
Policy and Practice; William J. Roberts, Associate Register and Director of Public 
Information and Education; Douglas Ament, Chief Information Officer; David J. 
Christopher, Chief of Operations; Elizabeth Scheffler, Director of Office of Public 
Records and Repositories; Sarang V. Damle, Deputy General Coimsel; Maria Strong, 
Deputy Director of Policy and International Affairs; Erik Bertin, Deputy Director of 
Registration Policy and Practice; Ricardo Farraj-Feijoo, Director of the Copyright 
Technology Office; and Catherine Rowland, Senior Advisor to the United States Register 
of Copyrights. 

Copies of the senior staff credentials arc enclosed with these responses, and they also are 
available on the Copyright Office website at http://copyright.gov/about/leadership/. The 
senior staff has extensive expertise and experience in intellectual property laws, 
government administration, and the domestic and global copyright marketplace. The 
senior legal staff have impressive academic backgrounds and a wide range of experience- 
from working in top law firms with diverse clients to working as in-house counsel to 
clerking for federal judges. 

16. How much travel is required of the Register? Please list any travel performed in 
your official capacity including destination, duration, and total cost. 

The Register is expected to travel to carry out the functions of the Copyright Act. This 
includes presentations and meetings with a wide variety of stakeholders. The Register 
receives many more invitations than are possible to accept, and therefore balances duties 
in Washington D.C. with the need to travel outside the office on an official basis. During 
Fiscal Year 2015, the Register traveled to Northern and Southern California, 
Massachusetts, New York, Rhode Island, Tennessee, and Washington State for a total of 
21 days, at a cost to the Copyright Office of $8,398. All international trips were 
postponed or declined. 
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17. How much travel is required of Copyright’s senior staff? Please list any travel 
performed in their official capacity including destination, duration, and total cost. 

The Copyright Office’s senior staff engages in domestic and international travel 
throughout the year pursuant to statutory authority and subject to Library approval. This 
includes traveling for intergovernmental meetings, trade and treaty negotiations, 
professional meetings, training, and presentations. During Fiscal Year 2015, among the 
senior staff, twelve people were on official travel for a total of 191 days to the following 
locations: domestically to Northern and Southern California, Florida, Georgia, Hawaii, 
Illinois, Massachusetts, Michigan, Minnesota, New York, North Carolina, Ohio, 
Pennsylvania, Rhode Island, Tennessee, Texas, and Washington State; and 
internationally to Australia, England, France, and Switzerland. The total combined cost 
for this travel to the Office after reimbursements was $64,585. 

18. To what extent do you consult and interact with members of any bargaining unit 
within Copyright? 

Most non-managers of the Copyright Office are members of one of two labor 
organizations representing bargaining unit employees at the Library of Congress — Local 
2477, American Federation of State, County and Municipal Employees, AFL-CIO (the 
“Union”); or Local 29 1 0, American Federation of State, County and Municipal 
Employees, AFL-CIO (the “Guild”). Members of the Copyright Office staff serve as 
representatives to both the Union and the Guild, and the current Guild President is a 
member of the Copyright Office staff As a result, the Register consults and interacts 
with members of both bargaining units on a regular basis, and Guild leaders are active 
participants in department meetings and all-hands meetings. 

19. How are application fees determined? How much authority does the Register have 
when determining fees? 

Application fees are set in accordance with the process enumerated in 17 U.S.C. § 708(b), 
which specifies various services for which the Copyright Office may charge fees and 
provides that the Register may adjust these fees “not more than necessary to cover the 
reasonable costs incurred by the Copyright Office for . . . [such services], plus a 
reasonable inflation adjustment to account for any estimated increase in costs.” 
Additionally, fees for core services must be “fair and equitable and give due 
consideration to the objectives of the copyright system.” Fees are established and set 
forth in Copyright Office regulations following a detailed analysis and public comment. 
Adjustments to core fees are effective 120 days after submission to Congress unless 
Congress chooses to amend them. 
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20. In your opinion, is Copyright in a better or worse situation than when you were 
appointed Register? 

All Registers build upon the prior work of their predecessors. Since June 1 , 20 1 1 , the 
Copyright Office has undertaken a comprehensive and integrated approach to 
modernizing the copyright system, engaging in analyzing updates to Copyright Office 
services as well as the copyright law it administers. These interrelated projects and 
policy reports are listed in pages 49-52 of the Strategic Plan. This work, much of which 
has coincided with budget cuts, includes the following building blocks: 201 1-2012 
Priorities and Special Projects plan; a 2013 business reorganization that created senior 
responsibility in IT planning, public records, education, and financial areas; in 2013, new 
programs for professors, post-graduate fellows, and academic institutions to supplement 
staffing and attract new ideas; in 2014, the first comprehensive revision of Copyright 
Office practices in 20 years, resulting in a 1300-page public Compendium ofU.S 
Copyright Office Practices for use by customers, employees, and the courts; in 2014, the 
first comprehensive legal analysis of the copyright recordation provisions (as related to 
bringing the system online); a 2015 recommendation for technology improvements and 
related business paradigms related to Copyright Office services; the 2015 Strategic Plan 
addressing all aspects of the Copyright Office; and the 2016 Provisional IT Plan. The 
Office also has produced a Fair Use index for public use. During this period, the 
Copyright Office has been substantively included in the House Judiciary Committee’s 
overarching review of the copyright law, which has included almost two dozen hearings 
so far. The Copyright Office has undertaken sixteen policy and technical studies, of 
which eleven have been completed and delivered, on complex provisions of law in 
support of Congress, and has held numerous public meetings and public comment 
periods. The state of the law and the Copyright Office thus is well-documented. As 
always, the Copyright Office has provided significant support to Executive Branch 
agencies, engaged in treaty negotiations and other intergovernmental affairs regarding 
intellectual property, and responds to all requests of the Department of Justice on legal 
interpretation of copyright matters. 

Together, these activities represent significant steps towards making the Copyright Office 
lean, nimble, results-driven, and fiiture-focused. Nevertheless, significant work remains 
to be done to truly realize the vision of a modem Copyright Office, and therefore it will 
be necessary to continue to expand and build upon these accomplishments in the coming 
years. The Strategic Plan sets forth a vision for how to proceed, subject to existing and 
future stmctural and financial constraints. The Copyright Office is extremely proud of its 
outsized contribution to Congress and the public. 
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21. How do you balance the various roles Copyright plays with respect to the size and 
varied interests of the stakeholder community? 

The mission of the Copyright Office is to administer the Nation’s copyright laws for the 
advancement of the public good; to offer services and support to authors and users of 
creative works; and to provide impartial assistance to Congress, the courts, and Executive 
Branch agencies on questions of copyright taw and policy. All Copyright Office 
rulemakings and policy studies are done in a public and transparent manner, soliciting 
input and feedback from any interested parties through public roundtables, requests for 
public comments, and other means. Recent policy studies have resulted in the receipt of 
comments from a range of stakeholders, including industry associations representing both 
technology companies and content owners, individual authors, public interest groups, 
academics, and interested members of the public. In addition, the Cop3Tight Office 
maintains an open door policy, and regularly meets with any individuals or groups that 
have an interest in copyright law and policy. In crafting rulemakings and policy studies, 
the Copyright Office strives to impartially balance the equities of various stakeholders 
within the stamtory constraints set forth by Congress. The Copyright Office has received 
tens of thousands of comments in its recent policy work, all of which are reviewed and 
posted. 

22. In your plan to modernize Copyright, is job loss expected and if so, in what areas? 

On the contrary, the Copyright Office currently has a staffing shortage and has steadily 
been working to fill vacancies or, as appropriate, update positions to meet the needs of 
the Copyright Office’s evolving work. It is expected that the Copyright Office’s greatest 
future needs will be in the areas of legal, technology, and business experts, with 
employees to be shifted away from work involving paper forms. 

23. If Copyright did end up as an independent agency, what impact would that have on 
the copyright customer base during the transition period? 

In the event that Congress enacts legislation changing the legal structure of the Copyright 
Office, the Copyright Office and Library would need to implement an appropriate 
transition plan. 

24. In FY 2015 Copyright transferred to the Library of Congress over 600,000 items 
worth approximately 30 million dollars. If Copyright becomes an independent 
agency, how will its deposit material be made available to the Library of Congress? 

Copyrighted works are made available to the Library pursuant to several statutory 
provisions and conditions. Some of these provisions are outdated and expensive, and 
serve neither the copyright registration system nor the Library. There is no reason. 
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however, that appropriate updates and agreements could not be made in a future 
restructuring plan to ensure that the Library continues to receive deposit material. 

25. The Library acquires most of its “best edition” copies through copyright 
registration. If Copyright moves to only require an “examination copy,” what 
would be the impact on the Library of Congress collections and its mission to serve 
the American people and Congress? 

This would depend on many factors, including the definition and disposition of what 
“examination copy” means, the equities of copyright owners and the public, and the 
particular collecting goals of the Library. No matter what, the Library should have a 
healthy demand function under mandatory deposit. In addition, the Library and the 
Copyright Office should be free to enter into repository agreements to accommodate each 
entities’ respective needs. 

26. What are the shared interests between Copyright and the Library of Congress? 

How could they be improved? 

As noted in the Register’s 2015 letter to Ranking Member Conyers, “[m]any Librarians 
and many Registers over the years have worked together appropriately and respectfully, 
to the mutual benefit of the public.” As the Copyright Act has become more complex, 
however, the administrative obligations delegated to the Copyright Office have increased 
and the day-to-day activities of the Copyright Office and the national library have 
become very different. The Copyright Office of today has statutory and regulatory 
obligations that support a copyright marketplace worth trillions to the U.S. and world 
economies. While the Library has an interest in copyright law as it relates to its broader 
mission of “ensur[ing] long-term, unintermpted access to the intellectual content of the 
[Library’s] collections,” the Copyright Office is tasked with administering the Nation’s 
copyright law in a balanced, impartial manner that recognizes the interests and equities of 
all who have a stake in it - authors, copyright owners, and users alike. Thus, it is 
important to have appropriate separation and safeguards in place. 

27. What services besides IT are currently provided by the Library of Congress to 
Copyright? 

As the parent agency of the Copyright Office, the Library provides certain day-to-day 
administrative services to the Copyright Office. Apart from IT, these fall broadly into 
five categories; 

• Facilities (including the provision of furnishings, safety inspections, and emergency 
preparedness services, but excluding services relating to the physical infrastructure of 
the building in which the Copyright Office is located, which is managed by the 
Architect of the Capitol) 
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• Human Capital (including traditional HR functions) 

• Financial Management (including accounting and disbursement functions) 

• Acquisitions (including management of contracting and procurement) 

• Other (including limited legal services. Inspector General functions, program 
planning, and special events, although the Copyright Office is charged a fee for the 
latter) 

The Copyright Office appreciates the ability to share some of these services, but other 
services are inefficient as applied to the Copyright Office and should be reviewed. 

28. Under acting Librarian David Mao and new CIO Bud Barton, work has begun to 
address the many IT issues detailed in the 2015 GAO reports. What coordinated 
steps are being taken by Copyright and the Library to remedy technology issues? 

The Register’s Office was very involved in helping to create the Library CIO position. 
Copyright Office staff regularly participate in the Library’s IT investment and planning 
processes, including participation in standing and specific meetings regarding IT issues, 
and have been actively engaged with the Library’s IT staff on initiatives seeking to 
address certain Library deficiencies identified by the GAO regarding the development of 
IT investment protocols. In addition, the Copyright Office has regularly updated the 
Library regarding its own IT planning processes, including the development of its 
Strategic Plan and the Provisional IT Plan. The Register is an active member of the 
Executive Committee of the Library and in this capacity engages in many agency-wide 
discussions. As appropriate, Copyright Office staff support or participate in Library 
activities and vice versa. However, the Copyright Office’s primary duty is to administer 
the nation’s copyright laws. 

29. How would you characterize the cooperation between Copyright and the Library of 
Congress in all facets of operations, not just with regard to IT? 

The Copyright Office has maintained an open and collegial relationship with the Library, 
exchanging information and concerns regarding matters that affect the Copyright Office 
directly, as well as information about many ancillary professional matters. 

30. You have stated the Copyright is constrained because it cannot retain and use all of 
its revenue and receipts. If Copyright had autonomy over its funds and spending, 
how would it impact your appropriation? 

There are numerous considerations on funding and spending. The Copyright Office 
would benefit from a revolving fund that allows spending across fiscal years and 
autonomy in managing its IT and other project expenditures directly. There are other 
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potential improvements, including recovering more than costs or future costs in some 
instances. The public currently is commenting on some of these issues pursuant to the 
Office’s March 1, 2016 Federal Register Notice of Inquiry. 

31. In 2007, Copyright moved from its paper-based registration process to the eCO 
system. You have testified that eCO is antiquated. Please tell us: 

A. What new system is required to modernize current business areas, 
specifically registration and recordation? What will it cost? 

The eCO application is a good first-generation software portal implemented in 
2007 by the previous Register and former Librarian. It was designed primarily for 
registration, however, and is not nearly comprehensive enough to meet public 
demands and the trillion-dollar economy that the Copyright Office serves. Last 
week, the Copyright Office issued a 110-page report setting forth detailed 
requirements for modernization of the IT systems serving the registration and 
recordation systems. As outlined in the Provisional IT Plan, the Copyright Office 
would assume responsibility for a modernized IT system to administer the 
copyright system for the first time. The Copyright Office estimates that this will 
cost in the range of $165 million over a five-year implementation timeframe. 

This cost is not about eCO, which is one software application, but rather the many 
aspects of copyright administration that are not operating at full digital capacity, 
and must be addressed through an IT enterprise solution dedicated to the 
Copyright Office and the national copyright system. 

B. Assuming adequate funding, how long do you estimate it will take to design, 
build, and test a new system? 

As outlined in the Provisional IT Plan, the Copyright Office estimates that the IT 
modernization process will take approximately 5 years to complete, with critical 
planning efforts to occur beforehand. The Provisional IT Plan calls for phased 
accomplishments throughout the process. 

C. In Copyright and in the Library of Congress, how many technology staff 
currently support eCO? How many full-time technology staff would be 
required to support and maintain a new system? 

There are currently 22 full-time staff members in the Copyright Technology 
Office, all of whom must provide some degree of support for eCO. Additionally, 
there are 10 full-time contractors that are dedicated to eCO, two of whom perform 
operations and maintenance activities and eight of whom perform development 
activities; and a Help Desk staff composed of contractors that provide service 
desk support for eCO. The Library’s Information Technology Services (ITS) 
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division provides support for eCO on an as-needed basis. Between one and seven 
support staff from ITS may work on eCO at a given time. More fundamentally, 
the Library controls the infrastructure, including the architecture and servers that 
underlie eCO. 

The Provisional IT Plan anticipates 42 FTEs to support the new IT systems, 
supplemented by IT contractors for the development, building, and operational 
maintenance of the system. Vendors and outside experts are an essential part of a 
continuously evolving IT environment. 

D. How will you ensure that the same mistakes are not repeated when you build 
the next system? 

Under the Provisional IT Plan, core IT and data experts would work in the actual 
Copyright Office for the first time, in a manner that focuses them on a full-time 
basis on the copyright system and integrates them into the legal and business 
expertise of the Copyright Office’s mission. The Provisional IT Plan was 
developed with the assistance of outside consultants utilizing GAO Best Practices 
and Leading Practices in Information Technology Management. The 
development team was tasked with creating an IT upgrade plan that delivers 
operational availability, reliability, scalability, and security, while minimizing risk 
areas. Risk factors and mitigation plans are spelled out throughout the plan. This 
structure would avoid the existing paradigm in which the Copyright Office is 
divorced from oversight of its IT system overall. 

E. How do you plan to keep pace with rapidly changing technology and 
customer demands? 

The Copyright Office is the expert in copyright law and the copyright 
marketplace, and will continue to interact regularly with that marketplace 
concerning the changing demands of the legal and business landscapes. 
Additionally, the Provisional IT Plan calls for the adoption of technologies and 
approaches to development that emphasize a scalable and flexible platform that 
can be easily expanded or modified to address changing technologies and 
customer demands, and will focus on widely-adopted IT standards and best 
practices. 
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The Register of Copyrights of the United States of America 

United States Cop\Tight Office - toi fndependence Avenue SF. ■ VVashingft.'n, PC 20519-6000 • (2021 707-8350 


The Honorable John Conyers, jr. 

Ranking Member 
Committee on the Judiciary 
United States House of Representatives 
2426 Rayburn House Office Building 
Washington, DC 20515 

March 23, 2015 


Re: The U.S. Copyright Office: Its Functions and Resources 
February 26, 2015 


Dear Ranking Member Conyers: 

I am writing to submit my views for the official record of the above-referenced hearing in 
accordance with your request.* Specifically, you asked me to respond to the testimony of 
the witnesses on the subject of "whether and how reorganizing the Copyright Office would 
benefit the copyright community.”^ It is a privilege to assist you and Chairman Goodlatte as 
you evaluate these important questions. Thank you for the opportunity to do so. 

For a number of reasons, my view as the current Register of Copyrights is that the 
Copyright Office requires congressional direction to meet the challenges and opportunities 
of the twenty-first century.* I am assuming for purposes of this letter that the Judiciary 
Committee will be further deliberating on the issues discussed at the hearing, and I am 
assuming further that the Committee is likely to alter the status quo, in which all Copyright 
Office staff are part of the Library of Congress and the Librarian appoints, supervises, and 
may remove the Register and other subordinate officers. This framework was uniformly 
questioned by the Committee’s Members and rejected by all of the hearing’s witnesses, who 


* The U.S. Copyright Office: Its Functions and Resources: Hearing Before the H. Comm, on the 
Judiciary, U4th Cong. (2015) (“2015 USCO Hearing”). Witnesses were Robert Brauneis (Professor, 
George Washington University Law School), Lisa Dunner (Partner, Dunner Law PLLC, on behalf of the 
American Bar Association Section of Intellectual Property Law), Keith Kupferschmid (General Counsel, 
Software & Information Industry Association), and Nancy Mertzel (Partner, Schoeman Updike Kaufman 
& Stem LLP, on behalf of the American Intellectual Property- Law Association). 

* 2015 USCO Hearing, oral testimony at 1:07:21, available at 

http://judiciary.house.gov/index.cfm/hearings?ID=5i7Ao6Ei-2222-42C6-87B2-05D64533F62D 
(statement of Rep, John Conyers, Jr., Ranking Member, H. Comm, on the Judiciary-). 

3 In arriving at the conclusions outlined in this letter, I consulted with my predecessor, Mary-beth Peters, 
who served as Register of Copyrights from 1994-2010. She agrees with the views presented here, 
including restructuring the Copyright Office as an independent agency. 
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noted concerns about budget independence, administrative authority, and mission 
effectiveness.'^' 

In light of these concerns, it would be helpful if Congress could decide the Copyright 
Office’s organizational structure soon, so that both the Library and the Copyright Office 
know whether and how to plan for the capital projects the Copyright Office so sorely needs. 
As the Committee is aware, major technology investments must be routed through the 
Library’s central departments and infrastructure, a paradigm that presents significant 
challenges for all involved. Moreover, the Library is under pressure to tighten its existing 
processes and controls in this area in order to further leverage economies of scale 
throughout the agency and adopt other "best practices” of the federal government, s The 
combination of these developments makes rather pressing the question of whether the 
Copyright Office should continue to be subject to the Library’s agency-wide goals. 


-t During the hearing, Representative Nadler observed that, “[fjrom the witness testimony, I gather there’s 
agreement that the Cop3Tight Office as currently structured faces a variety of challenges in executing the 
basic functions stakeholders expect from it, and that it lacks independent budget and administrative 
authority. While the Copyright Office . . . has taken the initiative to address some of these challenges, only 
Congress can provide the resources and flexibility the Office needs to continue serving the public and 
Congress.” Id. at 1:18:16 (statement of Rep. Jerrold Nadler, Member, H. Comm, on the Judiciary), 

Additionally, Representative Issa asked the witnesses whether they believed that the Copyright Office is 
“structured to be efficient, nimble, modem, and progressive in a way that the twenty-first century would 
demand.” Id. at 1:11:06 (statement of Rep. Darrell Issa, Member, H. Comm, on the Judiciary). The 
witnesses unanimously agreed “a hundred percent” that they did not believe it to be so structured. Id. at 
l;ll:l8. Representative Deutch also expressed his concerns over the current stracture, noting that “[ijt’s 
time to enact a restructured, empowered, and more autonomous Copyright Office that’s genuinely capable 
of allowing America to compete and to protect our citizens’ property in a global marketplace.” Id. at 
1:36:40 (statement of Rep. Ted Deutch, Member, H. Comm, on the Judiciary). 

Similar questioning took place at recent budget hearings. During the House Legislative Branch 
Subcommittee hearing on the Library budget. Ranking Member Wasserman Schultz asked whether the 
Copyright Office’s “current structure and [its] budget . . . [is] sufficient for [the Copyright Office] to 
perform the duties that [it is] responsible for, meet the user community’s concerns and their needs.” 

Fiscal Year 2016 Budget Hearing on the Architect of the Capitol and Library of Congress Before the H. 
Subcomm. on Legis. Branch of the H. Comm, on Appropriations, 114th Cong., oral testimony at 1:13:56 
(2015), available at http;//appropriations.house.gov/calendar/eventsingle.aspx?EventID= 393997 
(statement of Rep. Debbie Wasserman Schultz, Ranking Member, Subcomm. on Legis. Branch). 

In the Subcommittee on the Legislative Branch of the Senate Appropriations Committee, Ranking 
Member Schatz stated that, while it did at one time make sense for the Library and the Copyright Office to 
share the same “roof,” “reality has changed,” he is “worried that the Copyright Office may be outgrowing 
its home within the Library of Congress,” and the Library “may no longer be the right fit” for the 
Copyright Office. It is time, he recommended, to “reevaluate whether this fit . . . makes sense anymore.” 
FY16 Library of Congress & Architect of the Capitol Budget: Hearing Before the Subcomm. on the Legis. 
Branch of the S. Comm, on Appropriations, 114th Cong., oral testimony at 51:57 (2015), available at 
http://www.appropriations.senate.gov/webcast/legislative-branch-subcommittee-hearing-fyi6-libraiy- 
congress-architect-capitol-budget (statement of Sen. Brian Schatz, Ranking Member, Subcomm. on the 
Legis. Branch). 

5 At the request of appropriators, the Government Accountability Office has in recent months performed 
two audits involving information technology challenges in the Library and Copyright Office. GAO will 
publish its reports and recommendations, as well as agency responses, on or around March 31, 2015. 
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Although several alternative paths emerged at the hearing, my staff and 1 focused 
specifically on the long-term interests of the nation’s copyright system. We believe that 
these interests would be served best by establishing an independent copyright agency to 
administer the law, and by designating a leader that is appointed by the President with the 
advice and consent of the Senate. This would: provide a sound constitutional foundation 
for both new and existing copyright functions; ensure that Congress, federal agencies, and 
the public continue to benefit from the Copyright Office’s expert legal proceedings and 
impartial policy advice; and attract future qualified leaders able to interact at the highest 
levels of a modern government. 

Eliminating Constitutional Challenges 

Professor Brauneis’s testimony presents what he calls the "constitutional predicament" 
that is presented by the Copyright Office’s placement as a subordinate department of the 
national library.^ His statements highlight the somewhat unusual nature of the Library of 
Congress in the modern administrative state — the fact that it encompasses both purely 
executive functions (exercised through the Copyright Office and the Copyright Royalty 
Board) and purely legislative ones (exercised through the Congressional Research Service). 
This bifurcated structure has recently been subject to constitutional challenges in the 
courts. 

The Department of Justice has defended against those challenges by concluding and 
asserting that the Library as a whole is within the executive branch, a view adopted in 
recent court decisions.^ As a legal construct, it has to be this way, because the Librarian of 
Congress is removable by the President alone and there is no particular congressional 
committee that has similar or shared supervisory authority over the Librarian, As 
Professor Brauneis notes, this conclusion runs counter to the assumption of many who 
"consider the Library of Congress to be part of the legislative branch of government.’’® The 
prospect that the President can assert plenary authority over the Library of Congress may 
be cause for concern for Members of Congress.® 

More fundamentally for me, this confusion has the potential to compromise confidence in 
the copyright system at the very time we need to plan it forward. It is quite possible there 
will be further litigation involving the disposition of copyright functions and authorities. 


2015 USCO Hearing (written statement of Robert Brauneis at 9-15, available at 
http://judiciaiy.house.gov/„cache/files/4f8fc2ao-iode-4075-9b4b-26cbetfle05c/revised-brauneis- 
testimony.pdf) (“Brauneis Statement”). 

7 See id. at 10-12 (citing Eltra Carp. v. Ringer, 579 F.ad 294 (4th Cir. 1978); Intercollegiate Broad. Sys., 
Inc. V. Copyright Royalty Bd., 684 F.gd 1332 (D.C. Cir. 2012)). 

* Id. at 9. 

^ Id. at 12. 
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and it is also possible that the courts will weigh in with further decisions on this matter. It 
would be better for Congress to address the equities prospectively, namely, what is the best 
way to meet the overall objectives of the copyright law.i° 

Creating an Independent Agency 

Many people, including Members of Congress, are surprised to find that the copyright 
system is currently accountable to the national library.^i There are mounting operational 
tensions with this arrangement and, as discussed at the hearing, a number of legal 
concerns.i3 in considering the issues and the options, we have come to believe that the 
national copyright system would be better served by an independent copyright agency. 

An independent agency would both solve the current administrative challenges and 
position the copyright system for future success. It would also recognize and continue the 
Copyright Office’s extensive but impartial role in domestic and international affairs. 


™ The appropriate organizational and reporting structure for the Library itself, aside from the copyright 
system, is beyond the purview of our analysis. When Congress created the position of Librarian in 1802, it 
specified that the Librarian was to be appointed by the President acting alone. Then, when Congress 
created the Copyright Office in 1897, it insisted on Senate confirmation of the Librarian to satisfy 
Appointments Clause requirements. John Russell Young was the first Librarian to be formally appointed 
in this manner. 

“ 2015 USCO Hearing, oral testimony at 2:16:23 (statement of Rep. Dr. Judy Chu, Member, H. Comm, on 
the Judiciary) (“I think most people are surprised when they learn that our nation’s Copyright Office is 
housed under the Library of Congress, because the missions are so different.”). 

As discussed at the hearing, information technology is governed according to central Library processes 
and priorities, although the Copyright Office’s needs are distinct. Copyright Office staffing allocations and 
pay are subject to the Library’s decisions and rules. The Library’s salaries for top officials throughout the 
agency are considerably lower than salaries for comparable positions in executive agencies, including for 
copyright officials at the U.S. Patent and Trademark Office. 

■a As Lisa Dunner, speaking on behalf of the American Bar Association Section of Intellectual Property 
Law, noted, “there is an inherent conflict of interest in having the Library sign off on and control 
regulations formulated by the Office, especially since the Library, like other libraries, often takes 
position[s] on policy matters that are the subject of the Office’s studies and rulemaking proceedings.” Id. 
at 0:49:21; see also id. (written statement of Lisa Dunner at 9-10, available at 
http://judiciary.house.gov/_cache/files/9614a33b-39fd-4b57-bo53-055362b611d4/dunner- 
testimony.pdf) (voicing concern over potential conflicts of interest regarding copyright issues). 

This is not a new concern; instead it has been voiced by some in the copyright community for decades. 

See, e.g., Copyright Reform Act of 1993: Hearing on H.R. 897 Before theSubcomm. on Intell. Prop. & 
Jud. Admin, of the H. Comm, on the Judiciary, 103d Cong. 118 (1993) (statement of Steven J. Metalitz, 
Vice President & General Counsel, Information Industry Association) (“[W]e think it is time for Congress 
to consider severing the link between effective copyright protection and the acquisitions objectives of the 
Library. Those are important objectives, but we simply don’t feel that a creator’s right to obtain effective 
copyright protection should depend on how quickly he or she gives a free copy of the work, or two free 
copies of the work, to the Library of Congress.’); see also 2015 USCO Hearing (written statement of Keith 
Kupferschmid at 6-7, available at http://judicia1y.house.gov/_cache/files/998864fa-c779-494d-998e- 
44859ec39lia/kupfcrschmid-siia-testimony.pdf) (stating that many newspapers no longer register their 
works because the Library continues to require microfilm copies when newspapers no longer use 
microfilm, thus making registration a financial and administrative burden). 
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Countless Members of Congress, the Department of Justice, the Department of State, the 
United States Trade Representative, the Department of Commerce and, most recently, the 
Intellectual Property Enforcement Coordinator, have turned to the Copyright Office to 
interpret and advise on copyright legislation, litigation, trade agreements, and treaties 
arising under the Copyright Act and related provisions of Title 17. An independent agency 
would be free to serve all branches of government without political restraint, including 
especially through expert studies and congressional testimony. It could lead, participate 
in, or analyze issues relating to a variety of international meetings and negotiations, not 
only assisting the President in representing the intellectual property interests of the United 
States, but also assisting Congress in assessing the impact and implementation 
requirements for domestic laws. And, an independent agency could ably carry out 
executive functions (such as registration and rulemakings) without the complications that 
arise from being organized in the Library and treated for certain purposes as a legislative 
branch entity. 

As explored at the hearing, an independent copyright agency would also give Congress 
something it has never had before, a dedicated agency that is capable of absorbing more of 
the detail and administration of the copyright code.'^ This is a considerable advantage for 
a law that is both critical to the economy and invariably complex, not only for individual 
members of the public, but also for the many authors, businesses, and public interest 


“4 We should recognize that, over the years, the Library has offered a form of shelter to the Copyright 
Office with respect to its legal work and policy analyses, and that multiple Librarians have exercised a 
largely hands-off approach with respect to this portion of the Register’s portfolio. This deference helped 
the Copyright Office “to be an independent voice for ensuring balanced treatment of copyright-related 
matters." The Omnibus Patent Act of igg6; Hearing on S. ig6i Before the S. Comm, on the Judiciary, 
104th Cong. 18 (1996) (statement of Marybeth Peters, Register of Copyrights, quoting a letter to Sen. 
Hatch from the library, book publishing, and scholarly communities) (“1996 Hearing”). The same result 
can be achieved by creating an independent agency, albeit one with greater responsibilities and 
safeguards appropriate to the digital age. 

■5 See, e.g., 2015 USCO Hearing, oral testimony at 1:19:56 (statement of Lisa Dunner) (“if the Copyright 
Office had more autonomy and was given more control over its own rules and regulations I think it would 
have great improvements to the Act ... if the Copyright Office had the strongest voice where its rules and 
regulations were given more deference it would ultimately help to clear up the Act.”); see also Sandra M. 
Aistars, The Next Great Copyright Act, or a New Great Copyright Agency? Responding to Register 
Maria Pallante’s Manges Lecture, COLUM. J. L. ofL. &theArts at 304 (forthcoming 2015) (entered into 
the 2015 USCO Hearing record by Rep. Nadler) (noting that “empowering an entity to exercise 
appropriate regulatory authority could serve an important role and reduce the need for and scope of 
legislative action”). 

The possibility of using regulations to improve copyright law has been considered since the beginning of 
the copyright review process, and before. See The Register’s Call for Updates to U.S. Copyright Law: 
Hearing Before the H. Subcomm. on Courts, Intell. Prop., & the Internet of the H. Comm, on the 
Judiciary, 113th Cong. 35 (2013) (incorporating The Next Great Copyright Act Manges lecture) (“As more 
than one professor has noted, the Office has had very little opportunity to apply its expertise, leading 
Congress to write too much detail into the code on matters that are constantly changing, such as economic 
conditions and technology.”). 
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organizations that must regularly navigate and apply it. Moreover, creating an 
independent agency does not necessarily preclude later steps, for example, congressional 
consideration of an Intellectual Property Office, along the lines of previous congressional 
thinking on this subject.^® 

Although the Copyright Office is a small operation and would be a rather small agency, we 
see this as a significant benefit. An independent agency configuration would allow the 
Copyright Office to operate in a lean and innovative manner that befits the innovative 
needs of the copyright system. The Copyright Office could control its own budget and apply 
its fees in a targeted manner that does not dilute its mission or statutory duties. It could 
also harness synergies from across the government For example, in the federal 
government today, there is no reason that the Copyright Office could not share or purchase 
services from other agencies, including office space, financial systems, cloud services, and 
other needs. At the same time, the Copyright Office would be much better able to harness 
the considerable talents of the copyright community, particularly when investing in the 
enterprise architecture, data management strategies, and business-to-business services 
that copyright stakeholders require. 

Congress is in an exciting situation here. It has an opportunity to position the Copyright 
Office to act nimbly and efficiently, and in doing so to facilitate the extraordinary digital 
economy of the United States. As the witnesses noted, a well-functioning Copyright Office 
that is able to effectively service its constituents would produce significant benefits to the 
United States, including by generating "a large number of new copyright transactions,"*’ 
"more licensed projects,"*^ and "increased registration[s].”*’ In short, a "properly- 
functioning Copyright Office would be just a huge boon to the U.S. economy, to the creative 
community, and certainly to the public."2o 

Although the costs of a small agency are difficult to assess, they are surely manageable, 
especially when considered with the possibility of new fee models,’* At Congress’s 
direction, my staff and I would be pleased to create and submit a summary of other 
financial considerations. Otherwise, at this very early stage in the discussion, we would 


‘‘ See Omnibus Patent Act of 1996, S. 1961, t04th Cong. (1996) (legislation that vrould have established a 
single government corporation to formulate poliKy and administer patents, trademarks, and copyrights). 
Senator Hatch stated that it would be difficult to increase the Copyright Office’s executive powers, given 
its current “anomalous position in the legislative branch.” 1996 Hearing, at 2 (statement of Sen. Orrin 
Hatch, Chairman, S. Comm, on the Judiciary). 

2015 USCO Hearing, oral testimony at 1:34:30 (statement of Robert Brauneis). 

Id. at 1:34:42 (statement of Nancy Mertzel). 

» Id. at 1:35:04 (statement of Lisa Dunner). 

“ Id. at 1:35:17 (statement of Keith Kupferschmid). 

Id. at 1:04:39 (witnesses discussing potential fee differentiation). 
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observe that any new plan should accomplish three things; (1) it should codify Congress's 
decision regarding leadership and reorganization; (2] it should include an effective date for 
any change as well as a transition period for operations; and (3) it should require agency 
leaders to commission and present short-term and long-term priorities and investment 
justifications, including on such issues as office space, data centers, staffing priorities, and 
urgent IT expenditures .22 We know that other agencies and businesses in the copyright 
and technology sectors, which are extraordinarily talented and forward-thinking, have 
already expressed an interest in helping and would be invaluable to leaders undertaking 
these processes. 


Creating a Sub-Agency 

Some have suggested that the Register could be a Presidential appointee within a sub- 
agency of the Library of Congress. This approach would be an improvement over the 
current structure. For example, it would help with certain accountability issues,^^ and it 
would presumably provide the Register with more of a voice in appropriations requests, 
technology investments, and other management decisions that affect Copyright Office staff. 
However, this model would leave other concerns unresolved. The Librarian would remain 
the constitutional head of the agency and the copyright system, and the Register would not 
necessarily have autonomy over copyright policy and regulations.^"* The Register also 
would not be able to appoint inferior officers — for example, judges on a small copyright 
claims court, if Congress decided to create such a body — because the Register would not be 
considered a Head of Department for purposes of the Appointments Clause.^s These 
positions would instead be accountable to the Librarian, and, perhaps more to the point, it 
would unambiguously make the Librarian, and therefore the entire Library of Congress, 
part of the executive branch. 


“ The question of funding has arisen throughout eongressional discussion of the Copyright Office, with 
Members stating that the Copyright Office should be fully funded. See, e.g., U.S. Copyright Office: 
Hearing Before the Subcomm. on Courts, Intell. Prop., & the Internet of the H. Comm, on the Judiciary, 
113th Cong. 25 (2014) (“2014 USCO Hearing”) (statement of Rep. John Conyers, Jr., Ranking Member, H. 
Comm, on the Judiciary) ("And most importantly, a strong copyright system requires that we fully fund 
the Copyright Office, and in that regard the Chairman of this Committee, Bob Goodlatte, joins me in 
supporting that idea.”). More specifically. Members have inquired about the need for funds for the 
Copyright Office’s IT needs, including the scope of necessary funding. See, e.g., id. at 44 (statement of 
Rep. Jerrold Nadler, Ranking Member, Subcomm. on Courts, Intell. Prop., & the Internet). 

23 2015 USCO Hearing, oral testimony at 1:21:36 (statement of Keith Kupferschmid) (noting that a 
presidential appointment would help with transparency and accountability). 

“i Lisa Dunner, speaking on behalf of the American Bar Association Section of Intellectual Property Law, 
observed that the “Librarian’s broad authority over Copyright Office functions is problematic on multiple 
levels,” including because the Librarian need not be a copyright expert. Id. at 0:49:11. 

35 See, e.g.. Intercollegiate Broad., 684 F.3d 1332 (discussing Appointments Clause issues, including that 
Heads of Departments may appoint inferior officers). 
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In general, Congress could indicate its preference that the Library remove the sub-agency 
from central Library priorities and workloads, especially if these would present a legal or 
practical conflict, i.e, participating in Library committees regarding acquisitions strategies 
or budget needs. This would be helpful because Copyright Office staff are frequently called 
upon to support the Library's broader mission, including participating in agency-wide 
protocols and projects that have little to do with administering the Copyright Act. 

Nonetheless, in a sub-agency, it would still be the case that the Librarian could, in his or her 
discretion, exert influence or control over the Register's management or policy decisions. 
This is not necessarily an unusual dynamic within large or cabinet-level agencies, but in 
this case, where the Librarian's primary duty is always going to be the agency's mission as 
a library, it would be difficult for Congress to protect against either a real or potential 
conflict of interest,26 Congress could not enact a legal wall between the two parts of the 
agency, as is sometimes done to deal with potential conflicts of interest within an 
institution, because this would effectively remove the Librarian from the very role he or 
she is constitutionally responsible for as the agency head. It is therefore difficult to imagine 
how a sub-agency would stabilize or solve the current problems for very long. 

Considering the Department of Commerce 

Although witnesses spoke against the possibility^’ and the Copyright Office does not 
recommend it. Congress could relocate the Copyright Office to the Department of 
Commerce as a sibling to the U.S. Patent and Trademark Office. This would ameliorate 
constitutional concerns and combine the administration of intellectual property laws under 
one roof. Congress would need to be clear about the longstanding policy role of the 
Register, which otherwise could be compromised or even eliminated, as the case may be, 
depending on how reporting lines are established. 


Although the Librarian serves at the pleasure of the President, Librarians have enjoyed lengthy careers 
and tenures in modem times. Current Librarian of Congress James H. Billington was appointed in 1987 
by President Reagan, and former Librarian Lawrence Quincy Mumford served from 1954-1974. 
Additionally, while the President has the power to remove the Librarian, this has happened only rarely. 
See About the Librarian, Previous Librarians of Congress, George Watterston and John Silva Meehan, 
available at http://www.loc.gov/about/about-the-librarian/previous-librarians-of-congress/george- 
watterston/ and http://www.loc.gov/about/librarianoffice/meehan.html (upon election to the 
presidency, both President Andrew Jackson and President Lincoln removed the Librarian of Congress). 

See 2015 USCO Hearing, oral testimony at 2:25:23 (statement of Rep. Hakeem Jeffries, Member, H. 
Comm, on the Judiciary) (asking whether placing the Copyright Office within the Department of 
Commerce or combining it vrith the U.S. Patent and Trademark Office would present “incompatibility 
problems”); id. at 2:25:52 (statement of Nancy Mertzel) (noting that placing the Copyright Office in the 
Department of Commerce or incorporating it into the U.S. Patent and Trademark Office “feels a little bit 
like back to the future because it came up twenty-two years ago,” and further noting that patents, 
trademarks, and copyrights have very different legal schemes, and combining them would cause funding 
challenges). 



155 


On a different point, Congress would want to consider whether the copyright law itself 
would be lost or compromised in an agency as large as Commerce — specifically whether 
administrative and policy priorities would be subsumed. And, while Congress (and for that 
matter the Department of Justice) would still have access to a Copyright Office located in 
the Department of Commerce, the Copyright Office's views would not be independent. 
Rather, its policy advice and legal interpretations would be subject to the coordination, 
clearances, and, as applicable, restraints that are normal for executive branch officials. This 
would fundamentally change the role the Copyright Office has always played in the 
copyright system generally and with Congress specifically. ^8 Additionally, as former 
Register Marybeth Peters noted when testifying two decades ago, copyright law and policy 
go beyond promoting commerce and, indeed, have “a unique influence on culture, 
education, and the dissemination of knowledge,” and "may be slighted if . . . wholly 
determined by an entity dedicated to the furtherance of commerce.''^’ 

Honoring the Library of Congress 

We would also make a point that was not raised at the hearing. An independent agency 
would ensure the most flexibility to continue the Copyright Office’s relationship with the 
Library of Congress, which is the beneficiary of mandatory deposit provisions administered 
by the Register as well as certain works submitted by authors and other copyright owners 
for registration purposes. Although both of these provisions must be recalibrated for the 
digital age, we can assume that they will continue to exist in some form. The Register and 
the Librarian will therefore need to continue to work together on regulatory parameters 
and practices, either informally or through statutorily mandated committees or 
consultations.^^ At the core, what we are recommending is that Congress codify the 
structure that many assume to be the case already, by conferring independent agency 


“Among other Issy duties, the Register serves as the principal adviser to Congress on matters of 
copyright law and policy.’ 2014 USCO Hearing, at 27 (statement of Rep. Howard Coble, Chairman, 
Subcomm. on Courts, Intell. Prop., & the Internet). The Copyright Office “provides expert copyright 
advice to Congress . . . and the Office recommends much-needed improvements to the copyright system 
based on its research and analysis.” 2015 USCO Hearing, oral testimony at 0:32:43 (statement of Rep. 
John Conyers, Jr., Ranking Member, H. Comm, on the Judiciary). 

1996 Hearing, at 19, 24 (prepared statement of Marybeth Peters, Register of Copyrights). 

3 “ Congress has already created statutory relationships between the Copyright Office and other federal 
entities. For example, the Undersecretary of Commerce for Intellectual Property (who is also the Director 
of the U.S. Patent and Trademark Office), a Senate-confirmed advisor to the President on intellectual 
property, must by law “consult with the Register of Copyrights on all copyright and related matters.” 35 
U.S.C. § 2(c)(5) (2014). Likewise, the Register serves as a statutory advisor to the Intellectual Property 
Enforcement Coordinator, a Senate-confirmed position that was created by Congress in 2008 and is in the 
Executive Office of the President. 15 U.S.C. § 8111(a), (b)(3) (2014). 
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status on the Copyright Office and making it a partner with, rather than a subordinate to, 
the Library. 

The Library, of course, is a singularly important bibliographic institution known around the 
world for its unparalleled collections, curators, and scholars. Many Librarians and many 
Registers over the years have worked together appropriately and respectfully, to the 
mutual benefit of the public. Concerns about how to position the Copyright Office for the 
digital age certainly should not be framed as criticism of the Library. These issues more 
aptly reflect the unprecedented importance and complexity of the copyright law in modern 
times. 


Conclusion 

My staff and I are indebted to the Committee for its timely attention to the nation’s 
copyright system, including the United States Copyright Office. It is a privilege to assist 
with the forward-thinking questions you are exploring and addressing. At your request, we 
would be pleased to provide additional documentation or analysis in support of the 
operational and policy views expressed above. 


Respectfully, 

Maria A. Pallante 

Register of Copyrights and Director 
U.S. Copyright Office 


cc: Hon. Bob Goodlatte 
Chairman 

U.S. House of Representatives, Committee on the |udiciary 
2138 Rayburn House Office Building 
Washington, DC 20515 
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l^om; 

Subject: 

Date: 


Hi Kate I see the incomparable Marybeth is quoted in today's 8NA. We are dwarfs standing on the shouiders of giants, l hope you are well 
AN the GAO docs, including my response, is under Technology Reports on our website, under Publications. 


Pallanw M^ia 

RE.- Apr 2 - SNA’s P«ent TradematR & Copyright Jooma! - Breaking News 
Friday, ta. 2015 12 59 00 PM 


From: Spelman, i^ttierine C. [m3iito:IC3te.5pelman@klgates.aom] 

Sent: Thursday, April 02, 2015 5:31 m 
To: marybetiipeters@ymail.com; Pallante, Maria 

Subject: FW: Apr 2 - BNA's Patent Trademark & Ct^right Journal - Bre^ckig News 

Yep,.., It's big news alright 


Katherine C. Speiman 
K&L Gates LLP 
925 Fourth Ave Suite 2900 
Seattle, WA 98104-1158 


conference cali 855.886.4157 
Access code; 1017650 


FrcHii: BNA Highlights (mailta:t:^tghH g@email.bna.cQm] 

Sent: Thursday, 02, 2015 12:14 PM 
To: BNAf^tentT rademark&CopyrightJ! 

Subject: Apr 2 - BNA's Patent Trademark & Ct^sydgW Journal - Breaking News 


m 

BnsB aet dtoptayMi) terr^faiBftJU 

II m 

Patent , Trademark & Copyright Journal? 


Hi 


Breaking News 

Copyright Office Wants to Sever Ties With Library of 
Congress, Be Independent Agency 

Posted April 02, 2015, 3:07 P.M. ET 
fly Tamlin BBSon 

'TWje we have come to believe that the national oppyright system 
would be better served by an independent copyright agency,' Register 
of Copyrights Maria Pallante said in a letter to Rep. John Conyers Ir. 
(D'Mtch.) dated March 23, whch was later published on the Copyright 
Office’s webs te. 



A Feb. 26 House Jud clary Comm ttee heanng was held to discuss the 
Copyright Office's “Functons and Resources/ twt there were no 
representatives from the Copyright Office at the witness table. 
Accordingly, Conyers asked Pallante to submit her views on whether 
and how the Copyright Off ce should be rei^ruclured, because all of 
the w tnesses and lawmakers agreed that the Copyright office's 
current placement within— and under the complete amtrol of— the 
Library of Congress was no longer deal, at even vw>rkatte. 

During the hearing three potential solutions were disojssed; Give the 
Copyright Office more autonomy within the Library of Congress; have 
the off ce absorbed by the Patent and Trademark Off re; w make the 
Copyright Offire a standalone executive-level ag«icy. Pallante’s letter 
touched on all three recommendat ons, but creating an Independent 
agency provides the best way forward, she said. 

"At the core, what we are recommending is th<tt Congress codify the 
structure that many assume to be the case already, by cwrfwring 
independent agency status to the Copynght Off re and making R a 
partner w th, rather than a subordinate to, the Library/ the l^te- 
said. 


Full text: 
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From: 

Sent: 

To: 

Cc: 

Subject: 


Register of Copyrights 

Friday, January 15, 2016 11:21 AM 

Cop„Al! 

Register of Copyrights 
Copyright Office Developments 


Importance: 


High 


Dear Colleagues- 
Happy New Year! 

I look forward to seeing you soon. In the meantime, I wanted to flag for you the Code Act, which 
was introduced in December, as well as the House and Senate Reports that accompany the Consolidated 
Appropriations Act for current fiscal year 2016, enacted on December 18, 2015. We will discuss 
these issues in more depth in our All- Hands meeting on January 27'’^. 


Appropriations : 

The House Report supports the premise that the U.S. Copyright Office should have a dedicated IT 
plan (developed in the Copyright Office) and directs the Register to spearhead this work by 
completing an IT plan with costs (which will be both capital and operating) , and a timeline, and 
soliciting public feedback. We appreciate this assignment and we built such a process into the 
Strategic Plan that we released on December 1. (See Goal 5 on page 33 of our Strategic 
Plan: (Building a robust and flexible technology enterprise- 

http! //copyright .gov/reports/strategic-plan/USCO-strategic.pdf . ) Indeed, we are nearing completion 
of a Copyright-Office-specific IT plan and will be publishing a number of public questions within a 
few weeks. Better technology will of course support our staff as well as our customers. We will 
give you a heads up when we get a little closer. 

The Senate Report notes the importance of the Copyright Office and states that modernization should 
be viewed more broadly than upgrades to IT and business processes and could include changes to the 
legal structure and/or location of the Copyright Office. This comprehensive view of modernization 
is of course consistent with the last few years of deliberation in the House Judiciary Committee, 
as well as my own testimony. The Senate also notes the need for an open dialogue focused on what 
is best for the Copyright Office and modern economy. 

Copyright Office for the Digital Economy Act (CODE ACT) : 

Also, as you probably know, three members of the House of Representatives formally introduced a 
bill on December 11, 2015 that would recalibrate the Copyright Office as an independent agency in 
the legislative branch. Among other things, it codifies longstanding practice by ensuring that the 
director may advise Congress freely, without coordination or clearance from the executive branch. 

It also authorizes the Copyright Office to explore and institute more modern registration and 
deposit practices, and calls for a study as to whether mandatory deposit provisions could or should 
be transferred to the Library. And, consistent with comparable positions in the government, it 
provides that the President of the United States shall appoint the head of the Copyright 
Office. The bill was co-sponsored by Tom Marino and Judy Chu (both members of the House Judiciary 
Committee) and Barbara Comstock (member of the House Administration Committee) . 

In short, we have multiple committees focused on the well-being of the Copyright Office and the 
national copyright system and we are going to have a busy but exciting 2016 working with Congress, 
the Library, and our many stakeholders. 


Thank you, as always, for your outstanding public service and support. 
I am including links and summaries below. All the best- Maria 
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The Copyright Office for the Digital Economy Act <HR 4241) 

Bill text 

http s : //WWW, congress .qov/bill/ 114 th-conqress/house-bill/424i/ text 


“The United States Copyright Office is established as an agency in the legislative branch. . .. 

The powers and duties of the United States Copyright Office shall be vested in a Director of the United States 
Copyright Office, who shall be a citizen of the United States and shall be appointed by the President, by and 
with the advice and consent of the Senate. The President shall make the appointment after receiving the 
recommendations of the commission established under subparagraph (B) 


Key points: 

http : //chu . house . gov/ sites/chu .house .gov/ £ile5/docuraents/CODE%20Act%20Section^20by*20SectiQn . pdf 


Consolidated Appropriations Act, 2016 


House Report 114-110 

https://www.coneress.eov/cong^essiona^^eDort/114t^l-congress/house-^et>Olt/110/l 

The Committee fully 

understands the importance of the Copyr.ight Office as it 
relates to creativity and commerciai ax-tistic activity not only 
within the United States but also on a world-wide basis, tn 
order to serve the copyright owners and the copyright community 
in the 21st century, a robust modern information technology 
(IT) operation will be necessary. The $1.5 million provided in 
fi.scal year 2015 began the effort to determine the requirements 
for a modern IT environment. With the planning underway, the 
Committee directs the Register of Copyrights to report, to the 
Committee on Appropriation and relevant Authorizing Committees 
of the House on a detailed plan on necessary IT upgrades, with 
a cost estimate, that are required for a 21st century copyright 
organization. In addition to the co.st estimate, the Register 
shall include recommendations on a funding strategy and a time 
frame for completion of a new IT system that is necessary to 
better .serve the public in the digital age. The Register should 
seek public comments to help inform the Copyright Office with 
the funding strategy and implementation timeline. The cost 
estimate is to be provided to the Committee with 180 days of 
enactment of thi.s Act with the funding strategy to be provided 
45 days after public comments are received. 

The Coitunittee under.stands the Copyright Office has offered 
it,s expertise on copyright matters to the Executive Branch, 

Including participation in international discussions, and 
expects the Office to continue that important role. 


https : / /WWW . cong res s . gov/congresslonal-repQrt/114/senate-report/ 64 


Report 114-64 


Modernization . --The Coinmittee recognizes the v'ital and 
expanding role of the Copyright Office in our economy. In 
particular, the Comiriittee finds that digital technologies have 
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profoundly changed the copycignt marketplace and that, as a 
result of these changes, the Copyright Office's role is 
different than when it was originally founded and housed within 
the Library of Congress in 1870. The CoEunittee finds that it is 
necessary to ensure that effective, efficient, and secure 
systems are in place at the Copyright Office to support the 
needs of all copyright-related industries. The Conaiittee notes 
that, in addition to ongoing technological and process 
improvements, modernization of the Copyright Office could 
include proposed alternatives to its current structure and 
location within the Library of Congress. The Committee 
encourages an open dialogue to consider all options that allow 
for a thriving and efficient Copyright Office in the modern 
economy . 


House Report 114-110 

The Committee fully 

understands the importance of the Copyright Office as it 
relates to creativity and coitmercial artistic activity not only 
within the United States but also on a world-wide basis. In 
order to serve the copyright owners and the copyright community 
in the list centuryt s robust modern information technology 
{IT) operation will be necessary. The $1.5 million provided in 
fiscal year 2015 began the effort to determine the requirements 
for a modern IT environment, with the planning underway, the 
Committee directs the Register of Copyrights to report, to the 
Committee on Appropriation and relevant Authorising Committees 
of the House on a detailed plan on necessary IT upgrades, with 
a cost estimate, that are required for a 21st century copyright 
organization. In addition to the cost estimate, the Register 
shall include recommendations on a funding strategy and a time 
frame for completion of a new IT system that is necessary to 
better serve the public in the digital age. The Register should 
.seek public comments to help inform the Copyright Office with ' 
the funding strategy and impieraentation timeline. The cost 
estimate is to be provided to the Committee with 180 days of 
enactment of this Act with the funding strategy to be provided 
45 days after public comments are received. 

The Committee understands the Copyright Office has offered 
its ey.pertise on copyright matters to the Executive Stanch, 
including participation in international discussions, and 
e;-:pect.s the Office to continue that important role. 


Maria A. Pallante 

United States Register of Copyrights 
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Gopyrigbt 


United States Copyright Office 


U.S. COPYRIGHT OFFICE LEADERSHIP 



Maria A. Pallante 

United States Register of Copyrights and Director 

As United States Register of Copyrights, Maria A. Pallante directs the legal, policy, and business 
activities of the United States Copyright Office. The Copyright Office administers important provisions 
of Title 17, including the nation’s copyright registration and recordation systems and certain statutory 
licenses. The Register and her staff lead public discussions in the field of copyright law, act as principle 
advisors to the Congress on matters of domestic and international copyright policy, and support a 
variety of intellectual property efforts across the U.S. government, including appellate litigation, trade 
negotiations, and treaty implementations. Ms. Pallante assumed her duties on June 1, 20tt, after serving 
five months as Acting Register. Ms. Pallante has extensive experience as an intellectual property lawyer in 
both the public and private sectors. 

Prior to her appointment in 2on, Ms. Pallante held two senior positions in the U.S. Copyright Office, 
serving first as Deputy General Counsel (2007-2008) and then as Associate Register & Director of Policy 
and International Affairs (200S-2010). From 1999-2007, she was Intellectual Property Counsel and 
Director of Licensing for the worldwide Guggenheim Museums, headquartered in New York. She also 
worked for two authors’ organizations in New York, serving first as Assistant Director of the Authors 
Guild, Inc. and then as Executive Director of the National Writers Union, in each case working on 
copyright policy, transactions, litigation, and freedom of expression issues. She practiced briefly with 
the Washington, D.C., law firm and literary agency Lichtraan, Trister, Singer and Ross, and completed a 
clerkship in administrative law for the appellate division of the U.S. Department of Labor. 

Ms. Pallante is a 1990 graduate of the George Washington University Law School. She earned her 
bachelor’s degree in history from Misericordia University in Pennsylvania, where she was also awarded an 
honorary doctorate of humane letters. 
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FOCUS OF TENURE 

Under Ms. Pallantes leadership, the US. Copyright Office commenced a two-year evaluative process 
to address current complexities in the copyright system and to prepare the Copyright Office for future 
challenges. She released the public paper Priorities and Special Projects of the United States Copyright 
Office in October 2011, which identified seventeen priorities in policy and administrative practice and ten 
special projects for the Office. Using the Priorities document as a guide, the Copyright Office engaged 
with colleagues and customers across the public and private sectors to discuss a variety of issues relating 
to the quality and efficiency of Copyright Office services and possible future directions. Some of these 
discussions took the form of meetings or public roundtables outside the capital city, including Los Angeles, 
Silicon Valley, New York, and Nashville. The public feedback from this effort will help to define the Offices 
long-term strategic plan. 

In March 2013, Ms. Pallante helped initiate a comprehensive congressional review of US. copyright law, 
through her Horace S. Manges Lecture The Next Great Copyright Act, presented at Columbia Law School, 
as well as subsequent testimony before the House Judiciary Committee. In November 2013, she delivered 
the Christopher Me)^r Memorial Lecture at the George Washington University School of Law, entitled The 
Next Generation Copyright Office: What it Means and Why it Matters. Other speeches include Review and 
Reflection: Copyright Hearings and Related Discourse in the Nations Capital (February 2014); ASCAP at 
100 (February 2014); The Curious Case of Copyright Formalities (April 2013) and Orphan Works & Mass 
Digitization; Obstacles 8f Opportunities (April 2012). 

In December 2014, Ms. Pallante released the first comprehensive revision of the Compendium of 
US. Copyright Office Practices in more than two decades. She has delivered to Congress the following 
policy studies: Orphan Works and Mass Digitization (June 2015), Copyright and the Music Marketplace 
(February 2015), Resale Royalties: An Updated Analysis (December 2013), Copyright Small Claims 
(September 2013), Federal Copyright Protection for Pre-1972 Sound Recordings (December 2011), Legal 
Issues in Mass Digitization: A Preliminary Analysis and Discussion Document (October 2011) and Report 
on Marketplace Alternatives to Replace Statutory Licenses (August 2011). Several studies are pending, 
including on the making available right and visual works. 

Ms. Pallante has created several new programs to bring additional expertise to the Office. These include the 
Barbara A. Ringer Copyright Honors Fellowship, a distinguished public service clerkship for attorneys in the 
early stages of their careers, and the Abraham L. Kaminslein Scholar in Residence Program, an opportunity for 
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leading academics to work at the Copyright Office on mutiially beneficial projects. Her educational initiatives 
include the Copyright Matters Lecture Series, a community forum by which industry experts dfecuss the 
practical implications of copyright law in the 21st century, and the Copyright Academy, an internal program 
by which staff study a variety of complex legal provisions and judicial interpretations. She created a research 
program for law schools, in which professors design coxxrses and projects around timely issues and students 
receive support and direction throughout the semester from Copyright Office experts. 


ABOUT THE U.S. COPYRIGHT OFFICE 

('ongress created the f'opynght OlFice iti 1S97 as a separate department of the l.ibrary ol’('.ongies.s. 'Ihe Register of Copyrights serves bv 
appointment of, and under the genera! direction of, the Librarian of Congress. Congress enacted the first federal Copyright Act in 1 ;vo in 
acrordana' with .‘\rticlc i , section 8 of the United Slates Constitution, “to promote the progress of science and the uschil arts bs- securing tor 
limited times to authors and inventors the exclusive right to their respective discoveries." 

VVESOOC? Reviso.riO,?/ca.':tinb COPYSIGHT.COV s-cn.Mp-'y Von,,! | 3 
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©opyrlg^itgov 


UNITED STATES COPYRIGHT OFFICE 

department of the Ubrafy of Corsgtess 


U.S. COPYRIGHT OFFICE LEADERSHIP 



Douglas P. Ament 

Chief Information Officer 

Douglas P. Ament is the Chief Information Officer for the United States Copyright Office f USCO). He was 
appointed to the position in 2013. 

In his position as Chief Information Officer, Ament manages the USCO IT enterprise, including strategic 
planning efforts, digital security initiatives, policy development, and operational and maintenance activities, as well 
as all research and development of new technologies that support the business processes and mission of the Office. 

Ament formerly served as the Director of Information Technology for the USCO since April 2009 and Chief 
of the Copyright Technology Office since July 2008. He led a major technical upgrade analysis for the USCO as 
part of the Register’s 2011-2013 special projects, in which stakeholders from across the copyright spectrum offered 
recommendations and information about possible future strategies. Prior to joining the USCO, he served in the 
Library of Congress Information Technology Services directorate, and before that a federal IT consultant for more 
than 20 years supporting clients, including the U.S. Department of Justice, U.S. Coast Guard, U.S. Postal Service 
Headquarters, and the U.S. Navy. 


ABOUT THE USCO 

Ciongiess cieaU'ii the (Copyright Oftlce in i.Syy as a separate department of the I ihrary of Omgress. The Register of Otpy rights serves bv 
appointment of, and under the general direction of, the Librarian of (Congress. Congress enacted the first federal (iopyright Ad in 1790 in 
accordance with Article i, section 8 of the United States Constitution, “to pnrmoie the progress of science ami tise useful arts by securing for 
limited times to authors and inventors the excliLsive right to their respective di-scoveries.’' 


Revtsed 11/13/2014 
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Copyright.gov 


UNITED STATES COPYRIGHT OFfICE 

3 0«pi»rtfnent of the lihraty of Coi*giPS5 


U.S. COPYRtGHT OFFICE LEADERSHIP 



Jacqueline C. CharleswoTth 

General Counsel and Associate Register of Copyrights 

Jacqueline C. Charlesworth is the General Counsel and Associate Register of Copyrights for the United States 
Copyright Office (USCO). She was appointed to the position in 2013. 

In her position as General Counsel. Charlesworth provides legal guidance to the various divisions and programs 
of the USCO, including the national registration and recordation s)^tems, and is frequently called upon by 
Congressional offices, the Department of Justice and other federal agencies for advice and assistance. She also has 
the primary responsibility for the formation and promulgation of regulations and the adoption of legal positions 
governing policy matters and practices of the USCO. 

Charlesworth joined the USCO in 2012 following several years of private practice at New York City law firms, 
including Morrison & Foerster, LLP, where she represented copyright owners and users of copyrighted works in 
litigation, regulatory, and transactional matters. From 2006-2008, she served as Senior Vice President and General 
Counsel of the National Music Publishers’ Association and from 2001 to 2006 was General Counsel of The Harry 
Fox Agency, Inc., the leading agency in the United States for the licensing of mechanical rights in musical works. 


ABOUT THE USCO 

( \lngrcs^ created the (’opy right Office in iS^jas a separate department ot the Library of Congress. The Register ot (iopyrights serves bv 
appointment of. and under (he general direction of, tiie Librarian of Congres.<. Congress enacted the first federal Ciopyrighi Act in !79n in 
.iccordance with Article i, section » of the United States Constitution, “to promote the pn*gress of science .tnd the useful arts by securing for 
limited times to .lutluirs .md inventors the exciu.sive riglit to their respective discoveries.” 


Revised 11/13/2014 
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Gop3n:ie3it.gov 


UNITED STATES COPYRiCHT OFFICE 

a department of the Library of Congiesi 


U.S. COPYRIGHT OFFICE LEADERSHIP 



David I. Christopher 

Chief of Operations 

David J. Christopher is the Chief of Operations for the United States Copyright Office (USCO). He was appointed 
to the position in 2012. 

fn his position as Chief Operating Officer, Christopher supervises the day-to-day operations of the USCO, 
including financial controls, budget, human capital, statutory royalty investments, mandatory deposit and 
acquisitions, contracts, and strategic planning functions. He works closely with senior managers in technology, 
registration, policy and the greater Library of Congress. 


ABOUT THE USCO 

Congress created the < Copyright Office in iSyy as a separate department of the [ibrary of Congress. The Register of C Copyrights serves bv 
appointment of. and under the genera! direction of. the Librarian of Congrevs. ( Congress enacted the first federal (.Copyright .Act in 1790 in 
accordance with Article !, section 8 of the United States Comtitution, “to promote the progress of .science and the useful arts b\’ securing for 
limited times to autliors and inventors the exclusive right to their rc-spective discovYrie.s.” 


Revised 11/13/2014 
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Copyright.gov 


UNITEO STATES COPYRIGHT OFFICE 

a Library of Coog'Sis 


U.S. COPYRIGHT OFFICE LEADERSHIP 



Karyn Temple Claggett 

Associate Register of Copyrights and Director of Policy & international Affairs 

Karyn Temple Claggett is the Associate Register of Copyrights and Director of Policy and International Affairs 
for the United States Copyright Office (USCO). She was appointed to the position in 2012. 

In her position, Temple Claggett assists the Register with critical policy functions of the USCO, including domestic 
and international policy analyses, legislative support, and trade negotiations. She directs the Office of Policy and 
International Affairs, which represents USCO at meetings of government officials concerned with the international 
aspects of intellectual property protection, and provides regular support to Congress and its committees on statutory 
amendments and construction. 

Prior to joining USCO, Temple Claggett served as Senior Counsel to the Deputy Attorney General of the United 
States, where she assisted with the formulation of Department of Justice policy on sensitive legal issues, and helped 
manage the Department of Justice’s Task Force on Intellectual Property. She also spent several years in private practice 
as Vice President, Litigation and Legal Affairs for the Recording Industry Association of America and at the law firm 
Williams & Connolly, LLP. She began her legal career as a trial attorney for the U.S. Department of Justice’s Civil 
Division through its Honors Program and also served as a law clerk to the Honorable Nathaniel R. Jones of the U.S. 
Court of Appeals for the Sixth Circuit. 


ABOUT THE USCO 

i hc U.Si. (’opyrighlDflkc, and the position n}' Register ol Oipyrights, were creak'd b)' Congress in 1897 as a separate departnicni of the Library 
of ( Congress. Today the empioyees of the Office examine and pix>ccss more than a half a million claims to copyright registration, and record 
thousands ol documents related to regisinUionson file in the Ollices extensive catalogue. The Office also has critical law and poliev functions 
prescribed to it by the Congress, including: domestic and international policy analyses legLsiative support; litigation activities, support for the 
courts and executive brandj agencies (including .significant effort on trade and aiiUpiracy initiatives); participation on U.S. delegations in meetings 
with foreign gnveriuTH'nts or private parties; hosting copyright training for officials from developing countries; and providing public information 
and educational outreach. 


Revised 09/22/2015 
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Robert i. Kasunic 

Associate Register of Copyrights and Director of Registration Policy & Practice 

Robert }. Kasunic is the Associate Register of Copyrights and Director of Registration Policy and Practice for the 
United States Copyright Office (USCO). He was appointed to the position in 2012. 

In his position, Kasunic heads the Office of Registration Policy and Practice, which administers the US. copyright 
registration system and advises the Register on questions of registration policy and related regulations and 
interpretations of copyright law, He is a recognized copyright expert and is one of four legal advisors to the Register. 

Kasunic joined the USCO in 2000 as a senior attorney in the Office of General Counsel after having previously 
engaged in private practice. He currently serves an adjunct professor of law at the Georgetown University Law 
Center and American University’s Washington College of Law. 


ABOUT THE USCO 

Congress cre.ttc‘<i the (kipy right Oftiee in i.Si>7 as .t separate department of the library of Caingress. The Register of Copyrights serves tn 
appoiminent of, ami under the general direttion of, the librarian of Congress. Congress enacted the first federal Copyright Act in 1700 in 
accordance with Ariicle 1, section it ot the I'nited States Constitution, "to promote the progress of science and the usefui arts bv securing for 
Hmited times !o authors and ineentors the exclusive right to their re.s|.>ectivc discoveries." 
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William J. Roberts, Jr. 

Associate Register of Copyrights and Director 
of Public Information and Education 

William J. Roberts, Jr. is the Associate Register of Copyrights and Director of Public Information and Education for 
the United States Copyright Office (USCO). He was appointed to the position in 2014. 

In his position, Roberts heads the Office of Public Information and Education which informs and carries out 
the work of the USCO and the Register by providing authoritative information about the copyright law to the 
public, and education through various public outreach programs. The Office of Public Information and Education 
publishes the copyright law and other provisions of tide 17, maintains a robust and accurate public website, creates 
and distributes a variety of circulars, information sheets, and newsletters. In addition, the Office responds to 
public inquiries regarding provisions of the law, explains registration policies and practices and other copyright- 
related topics, and plans and executes a variety of educational activities and outreach. 

Roberts joined the USCO in 1987 as an attorney in the Office of General counsel after having previously 
engaged in private practice. He was a Judge on the U.S. Copyright Royalty Board from 2006-2013, and was 
previously an adjunct professor at the Catholic University Columbus School of Law and the George Mason 
University School of Law. 


ABOUT THE USCO 

< longiess created the ( lipy right Office in iSijr as a separate department of the Library of Congress. The Register of (..opvrights >erveh hv 
appointnien! (if, and under the general dircclum of, the Librarian of Congress. Congress enacted the first federal Liupvright Act in i-yo in 
accordance with Article i, -.ectioii iS of tite Cnited States Aionstitution, "to promote the progress of science ami the useful arts hv securing for 
limited times to authors and inventors the exclusive right to their respective discoveries." 


Revised 11/13/2014 
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Elizabeth R. Scheffler 

Director, Office of Public Records and Repositories 

Elizabeth R. Scheffler is the Director of the Office of Public Records and Repositories for the United States 
Copyright Office (USCO). She was appointed to the position in 2014. 

In her position, Scheffler heads the Office of Public Records and Repositories, which establishes records 
policies and oversees significant databases of copyright ownership and related information. Her duties include 
ensuring the storage and security of copyright deposits, recording licenses and transfers of copyright ownership, 
researching and providing certified and uncertified reproductions of copyright deposits, and maintaining the 
official records of the USCO. 

Prior to her current position, Scheffler was Chief of Operations for the USCO from 2008 to 20H. She has held 
senior positions at the Library of Congress, the National Ocean Service of NOAA, and the National Air and Space 
Museum of the Smithsonian Institution. 


ABOUT THE USCO 

OmgresscrcMU'd the Copyright Office in iSg- as a separate department of the Library of Congress. The Register of Ciopvrights serves bv 
appninimcni of, .uid under the genera! directum oh the Librarian of Congress. Congres.s enacted the tifstfeder.il Copyrighi Act sn lyyo in 
accordance with Article i, .section 8 of the United Stales Con5titution,“to promote the progress of .science and the u.sefui art.s by securing for 
iiniifed times to autiior.s and inventors the exclusive right to their respective discoveries.” 


Revised ii/ij/2014 
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Sarafig V, Datnle 

Deputy General Counsel 

Sarang (Sy) Damle is Deputy General Counsel for the United States Copyright Office (USCO). He was appointed to 
the position in 2015. 

Damle assists the General Counsel on the full range of legal issues before the Office, including litigation, policy 
studies, and regulatory proceedings. He also helps provide legal advice and assistance to the various components 
of the USCO, the U.S. Department of Justice, and other federal agencies. 

Damle joined the USCO in 2014 after several years of government service. From 2013 to 2014, he was Senior 
Counsel in the Consumer Financial Protection Bureau. Before that, Damle was an appellate litigator in the 
Department of Justice's Civil Division, where he served as lead counsel in over 40 appeals, with a focus on 
intellectual property, separation of powers, and administrative law matters. Damle began his legal career as a law 
clerk to the Honorable Sandra L. Lynch of the U.S. Court of Appeals for the First Circuit. 


ABOUT THE USCO 

The I'.S, (, ()}>y right Oftne, ami the position of Rcgi.sterof'<i5p>Tights were created bytl-ongress in .»?. .i separate department of the Library 
of t iongresH. Today, the employees of the Office examine and process more than .i half a million clainv; to copyright registration, and record 
thousands of documents rel.Ucd to legistrafions on file in the Office’s extensive catalogue. The Office .ilso has critical law and policy functions 
prescribed to it by the Congress, including: domestic .hkI international policy analyses: legislative sup|K'rt; litigation activities, support for the 
courts and executive branch .igencies {intkuiing significant effort on trade and antipinKV initi.uive.si; pariicipaiiun on U.b, delegations in meetings 
^vith tbreign governments or private parties; hosting aipyright training for officials form developing countries; and providing public intormacron 
and educafiotsat outreach. 
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Erik Bertin 

Deputy Director for Registration Policy & Practice 

Erik Bertin is Deputy Director for Registration Policy and Practice for the United States Copyright Office (USCO). 
He was appointed to the position in 2015. Bertin assists the Associate Register of Copyrights and Director of 
Registration Policy and Practice on a full range of legal, policy, and governance issues involving the USCO and 
its administrative responsibilities, 

Bertin joined the USCO in 20n as an Attorney- Advisor in the Office of Policy and International Affairs and 
served as an Assistant General Counsel from 2013 to 2015. Before joining the Office, he worked in private practice 
for fifteen years in Washington, DC where he represented a wide range of clients in intellectual property matters. 


ABOUT THE USCO 

Ihe U.S. ('opyrigiu Office, and ihcposilion ol'Regisier ol' Copyrights, were crcaled by Congress in 1897 as a separate department of the Library 
ol Congress. Today, ihe cmployee.s of the Office examine and process more than a half d militon claims to copyright registration, and record 
ihousaitd.sordoctimcnSs related to regi,slrali<»nson fik in the Ofliccscxien,sive catalogue. The Olfice also has critical law and poliev functions 
prescribed to it by the (.’ongress, including: domestic and international policy analyses: legislatise support: litigation activities, support for the 
c(nut> and executive branch agende.s {including significant eflbrt on trade and aiitipiracy initiatives): participation on U-.S. delegations in nieeting.s 
With foreign governments or private parties; ho.sling cop)?right training for officials from developing countries; and providing public iniormation 
and educational outreach. 


Revised 04/06/2015 
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Catberlne R. Rowland 

Senior Advisor to the United States Register of Copyrights 

Catherine R. Rowland is Senior Advisor to the United States Register of Copyrights. She was appointed to the 
position in 2015. 

In her position, Rowland assists the Register on a hill range of policy, legal, and governance issues relating to the 
United States Copyright Office (USCO) and its agency responsibilities. 

Rowland joined the USCO in 2010 as Attorney- Advisor for the Copyright Office’s Office of the General Counsel 
and also served as Senior Counsel for Policy and International Affairs from 2012 to 2015. Before joining the Office, 
she served several years in private law practice in Washington, D.C, where she represented a variety of companies 
in intellectual property matters. Rowland began her legal career as a law clerk for the Honorable N. Carlton 
Tilley, Jr., of the United States District Court for the Middle District of North Carolina. 


ABOUT THE USCO 

Ihc U S- ('opyright Ofiice, and the position ot' Register of Copyrights, were created h)' Congress in 1897 a,s a separate departnienl of the Librarv 
o( (.Congress. Today, the employees of the OHice examine and process more than a half a million claims to copyright registration, and record 
thousands of'documenU rclaied to registrations on file m the Ollke's extensive catalogue. 'Hie Olltco also has criiicai law and p>>licv functions 
prescribed to it by the Congress, including: domestic and international policy analyses; legislative support; litigation activities, support for the 
courts and executive branch agencies (including signiheant effort on trade and oiUipiracy initiatives); participation on US. delegations in meetings 
with foreign govern incni.s or private panic.s; hosting copyright training for officiab from developing cmmlries: and providing public information 
and educ;iriona! outreach. 


Revised OS/19/2015 
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Maria Strong 

Deputy Director of Policy & International Affairs 

Maria Strong is the Deputy Director of Policy and International Affairs for the United States Copyright Office 
(USCO). She was appointed to the position in 2015. 

Strong assists the Associate Register of Copyrights and Director of Policy and International Affairs on 
issues involving domestic and international copyright law and policy, trade negotiations, and legislation. She 
represents the USCO at meetings of foreign government officials concerned with the international aspects of 
intellectual property protection, serves on interagency committees, and provides regular support to Congress 
and its committees. 

Upon joining the USCO in 2010, Strong served as Senior Counsel for Policy and International Affairs, and also 
served as Acting General Counsel in April-July 2013. Before joining the Office, she served 19 years in private law 
practice in Washington, D.C. where she represented clients in the media, technology and entertainment sectors and 
provided analyses and advocacy on global and domestic issues involving copyright law, enforcement, trade policy 
and e-commerce. She began her legal career as a staff attorney at the Federal Communications Commission. 


ABOUT THE USCO 

The U.S. < :op7right Oftltt', and the po>ition of Register ot' Copyrights, were created bvCongres-s in i{<v7us a separate deparnuent ofihe Lihrary 
of ('i)ngre,s.s. Today, the emplovees of ihe tfftke examine and pr«)cess more than a half a million tiaims Co copyright registration, and record 
thousands of documents related to registrations on file in the Office’s exten-sive catalogue. The Office also has critical law and poiicv functions 
prescribed to it bv the Uongre.ss. including: domestic and international policy- analyses: legislative support; litigation activities, support hw the 
courts and executive branch agencies linckiding significant effort on trade and antipiracy initiatives); participation on LfS, delegations in meetings 
with foreign govern men !\ or private parties; hrxsting copyright training fi>r officials from developing aiuntries; and providing public inforni.ition 
and educational outreach. 


Revised 01/09/2015 
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Ricardo Farraj-Feljoo 

Director of Copyright Technology Office 

Ricardo Farraj-Feijoo is the Director of the Copyright Technology Office for the United State Copyright Office 
(USCO). He was appointed to the position in January 2015. 

Mr. Farraj-Feijoo is responsible for the oversight and administration of technology issues affecting registration 
and recordation and provides leadership on the development and implementation of technology initiatives. He 
oversees compliance issues with federal law, regulations, information technology standards, and best practices. 
Prior to joining USCO, Farraj-Feijoo served as the Director of Information Technology Services within the Office 
of the Chief Information Officer at the US. Department of Commerce, where he implemented cloud-based 
solutions as well as server virtualization farms. He also worked in the information technology department of the 
Library of Congress and for the Congressional Research Service. Mr. Farraj-Feijoo is a veteran of the U.S. Army. 


ABOUT THE USCO 

The U.S. (h)pyright Oftlee, and ibv position of'Rt^i.ster oKiopy'rights, \vere created by Congres.> in 18^7 as .1 separate department of the [.ibrary 
of (.'ongress. Today, the emplovees of the IffTice examine and process more than a half a million claims to copyright registratior'., and record 
thousand.s of documents related to registrations on file in the Office’s extensive catalogue. The Office also has critical law and policy Kuncfions 
prescribed to if bv the ( iongres.s. including; domestic anti international policy analyses; i^islative support; litigation activities, '.upport tor the 
courts and executive branch agencies 'including significant effort on trade and antipiracs- initiatives); purticipatioii on U.S. delegations in meeting.s 
with foreign governments or private parties: hosting copyright training fbrofticials Irrjm developing countries; and providtng public information 
and educational otitreach. 
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Jamie Fleet. Minority Staff Director 


July 14, 2016 


Maria A. Paliante 
Register of Copyrights 
The Library of Congress 
101 Independence Ave. SE 
Washington, D.C. 20540 

Dear Register Paliante, 

Thank you for your letter of March 7, 2016. We appreciate your assistance in responding 
to our further questions on the Copyright Office (USCO). In reviewing your responses 
staff has identified some areas requiring further information as well as additional 
questions. The Committee requests you respond to these additional questions that will 
be made part of the hearing record. Please provide your responses to the following 
questions to the Legislative Clerk, C. Maggie Moore (Maggie.Moore@mail.house.gov) 
with the Committee by August 12, 2016. 

Follow UP Questions from Previous Request: 

1. Ql. During this year’s scheduled annual maintenance ... 

Please provide copies of all communications to and from the Copyright Office in 
the summer of 2015 regarding running Copyright Office systems from the 
Alternate Computer Facility (ACF) to avoid taking public facing IT systems offline 
during the AOC testing period. 

2. Q4. ... What changes in LOC policies and regulations would be required 
for you to take beneficial use of such innovative capabilities? 

Please provide specific citations in existing Library of Congress regulations and 
policies that the Library should consider changing. 

3. Q5. ... What, if any, are the outstanding actions to prevent another 
outage and the status of these actions? 

Has the USCO completed one or more Service Level Agreements, Memoranda of 
Understanding with the Library or the Office of the CIO? If so, please provide 
copies. If your office has not completed requested agreements or SLAs that other 
Library Service Units have please explain what issues are preventing USCO and 
OCIO from completing these agreements? Please provide a copy of your proposed 
Service Level Agreements to the Library. If there a formal process between USCO 
and OCIO to track resolution of issues which contributed to the 2015 service 
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outage? What are the outstanding actions, if any, from both USCO and LOG in 
specific detail? 

4. Q27. What services besides IT are currently provided by the Library of 
Congress to Copyright? 

Please identify the dollar value for each of the 5 categories you documented in your 
response for Fiscal Years 2013, 2014, and 2015. 

Additional Questions: 

5. The Copyright Office received a number of comments on how modernizing the 
office’s IT and services should be funded. If the office makes the policy 
determination that modernization should be paid for solely with user fees, does the 
office currently have the statutory authority to include modernization costs in the 
“reasonable cost” of providing your services? If not, please provide the basis and 
the precedent for this determination. 

6. Does 17 U.S. Code § 708(b) allow for the ongoing costs of upgrading or replacing 
obsolete computer equipment and software to be considered in the “reasonable 
cost” of providing your services? If not, please provide the basis and the precedent 
for this determination. 

7. The Copyright Office’s Proposed Schedule and Analysis of Copyright Fees states 
that your office uses the “Federal Accounting Standards Advisory Board’s (FASAB) 
guidehnes for determining the full cost of federal agency program activities and 
the Office of Management and Budget’s (0MB) Circular A-25 Revised: User 
Charge document regarding costing guidelines and establishing user fees” for 
determining the reasonable cost of providing your services. 

Has your office sought guidance or recommendations from the FASAB or 0MB on 
whether the expense of upgrading or replacing obsolete computer systems, 
infrastructure, and software should or could be accounted for in the cost of 
providing your services? If so, please provide any correspondence between your 
office and the FASAB or 0MB on this issue. 

8. FASAB guidelines state that the costs of computer equipment and software that 
are to be in use for over two years should be capitalized. Has the Copyright Office 
been including the expenses from depreciation or amortization of computer 
equipment and software in determining the “reasonable cost” of providing your 
services? If so, please provide your depreciation/amortization schedules for 
computer equipment and software, and what doUar amount or percentage these 
expenses contribute to the “reasonable cost” of providing your services. 

9. Please describe in detail the authorities and responsibilities of Copyright’s Chief 
Information Officer. 

lO.In your response to question 5, you indicate that the 2016 service level agreement 
(“SLA”) presented by the Library of Congress lacked sufficient detail. Please 
elaborate with specificity which details were lacking. 

11. It is our understanding that Copyright is the only service unit to not agree to the 
SLA. Why? 

12. Please provide all communications between Copyright and LoC regarding the SLA. 

13. In your response to question #27 when asked about impact on the customer base 

should Copyright transition from under LoC you replied that a transition plan 
would be necessary. Has Copyright performed or commissioned any studies or 
analysis of this? 
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14. Please describe the review process used by Copyright when determining whether 
or not to approve an SLA. 

15. Please provide any memoranda of understanding or similar agreements between 
Copyright and the Library of Congress. 


If you have any questions concerning this matter, please feel free to contact Brad 
Walvort on the Committee Staff at (202) 225-8281. Thank you again for your testimony 
and previous response. We look forward to hearing from you. 


Sincerely, 



Candice S. Miller 
Chairman 
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The Register of Copyrights of the United States of America 

United States Copyright Office ■ loi Independence Avenue SE -Washington.DCrossy-Sooo ■(202)707-8350 


August 12, 2016 


Chairman Candice S. Miller 
Committee on House Administration 
House of Representatives • 

1309 Longworth House Office Building 
Washington, D.C. 20515-6157 

Re: Questions for the Record Regarding the December 2, 2015 Hearing 
Improving Customer Service for the Copyright Community 

Dear Chairman Miller: 

As requested, please find enclosed the written responses to your July 14, 2016 letter containing 
questions for the record. In addition, we include documents that provide relevant information. 

Respectfully submitted, 

Maria A. Pallante 

Register of Copyrights and Director 
U.S. Copyright Office 


Enclosures 


cc: David Mao 

Acting Librarian of Congress 
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U.S COPYRIGHT OFFICE 
Library of Congress 

Responses to July 14, 2016 Request for Responses to Questions for the Record 


Committee on House Administration 
United States House of Representatives 

Follow UP Questions from Previous Request: 

1. Ql. During this year’s scheduled annual maintenance ... 

Please provide copies of all communications to and from the Copyright Office in the 
summer of 2015 regarding running Copyright Office systems from the Alternate 
Computer Facility (ACF) to avoid taking public facing IT systems offline during the AOC 
testing period. 

Al, Please see attached. 

2. Q4 ... What changes in LOC policies and regulations would be required for you to 
take beneficial use of such innovative capabilities? 

Please provide specific citations to existing Library of Congress regulations and policies 
that the Library should consider changing. 

A2. Under existing Library regulations and practices, all federal contracting, including 
for IT services, goes through the Library’s agency-wide contracting office and staff, 
prohibiting principals in the Copyright Office from contracting directly with outside 
vendors. See LCR 212-2, 2100, 2111, and 2112. Based upon this process, the Copyright 
Office has no authority to directly engage the services of GSA’s 18F or the many other 
service providers that could be partners in the IT modernization plan the Office vetted 
publicly last year. The Copyright Office has thus suggested that it would be most 
effective for the Office to hire its own bonded, contracting officers, separating from the 
agency-wide Library contracts office, but following all applicable statutes, regulations, 
and best practices in this area. Likewise, to the extent the Copyright Office is hiring 
technology and business experts on its staff, dedicated staffing processes should be 
considered, as should all related appropriations and budgeting processes and 
relationships. 

3. Q5 ... What, if any, are the outstanding actions to prevent another outage and the 
status of these actions? 

Has the USCO completed one or more Service Level Agreements, Memoranda of 
Understanding with the Library or the Office of the CIO? If so, please provide copies. If 
your office has not completed requested agreements or SLAs that other Library Service 
Units have please explain what issues are preventing USCO and OCIO from completing 
these agreements? Please provide a copy of your proposed Service Level Agreements to 
the Library. If there a formal process between USCO and OCIO to track resolution of 
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issues which contributed to the 2015 service Outage? What are the outstanding actions, if 
any, from both USCO and LOC in specific detail? 

A3. The process for negotiating SLAs and MOUs is necessarily fluid, as the Library 
works to asses, improve, and plan future IT services. Yesterday afternoon, the Library’s 
CIO informed the Copyright Office that his office no longer plans to utilize internal SLAs 
and thus will not be executing one with the Copyright Office. Rather, according to the 
CIO, who consulted with GAO, his office is planning to incorporate baseline commodity 
and enterprise IT service offerings into a service catalog that will replace the need for 
individual service unit SLA agreements. The OCIO further stated that the service catalog 
will be published before the end of the FY16 and that MOUs will be used to address any 
mission specific needs of the Copyright Office that are not covered in the OCIO’s initial 
service catalog. We understand that the OCIO also has relayed this information to the 
Committee. This decision therefore negates the further negotiation and execution of an 
SLA, though the Copyright Office will proceed with reviewing and discussing all 
services and associated costs with the OCIO when these are ready. 

By way of history, to respond to the question asked, the Library presented a working 
draft to the Copyright Office last fall (2015), but subsequently indicated that a more 
complete document would soon be made available. The Office provided input regarding 
the SLA for the Library to consider and has otherwise worked actively with the OCIO. 

As part of this effort, the Copyright Office recently provided the Library with proposed 
revisions in writing, including appropriate caveats to memorialize the agreement of the 
Copyright Office and OCIO that the SLA would inevitably need to be revised to address 
future decisions and directions, including changes in technology planning and 
implementation. 

Regarding MOUs, the Copyright Office signed limited Memoranda of Understanding 
(MOU) between 2007 and 2013 that address a number of specific IT needs, such as the 
hosting of eCO and the development of an incident and service request management 
workspace for the Office. And, the Library presented the Copyright Office with a new 
draft MOU at the beginning of this year (2016). The Copyright Office has participated in 
regular meetings with OCIO staff and provided written comments regarding the draft 
MOU; in turn, the Library provided proposed revisions to the MOU. The Copyright 
Office continues to have comments on the draft MOU, including a primary concern that 
an appropriate SLA should be implemented, or alternatively, OCIO’s fortlicoming service 
catalog published, before the MOU is finalized. The Copyright Office will continue to 
collaborate with the Library to finalize the MOU, and appreciates the assurances of the 
OCIO that neither it nor other parts of the agency should feel pressured to sign the MOUs 
prior to resolution of outstanding issues. 

Regarding the outage, the Library is responsible for the design and implementation of IT 
infra.structure services such as database and network services and the Copyright Office 
does not have control over or visibility into these areas. Accordingly, the OCIO is 
charged with identifying, managing, and tracking resolution of issues that contributed to 
the 2015 outage. While the Library has not established a formal process between it and 
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the Copyright Office to track resolution of issues that contributed to the 2015 service 
outage, members of the Copyright Technology Office and the Copyright Chief 
Information Officer communicate regularly with their counterparts in OCIO regarding 
broad-based IT issues. 

Finally, we also note that both the Acting Librarian and the Register of Copyrights 
testified that they requested a third party investigation of the 2015 outage, through the 
Office of the Inspector General (OIG), which will assist in more formally isolating 
contributing factors, and the Copyright Office has provided the OIG with information the 
Office has relating to the root cause analysis of the outage. 

4. Q27. What services besides IT are currently provided by the Library of Congress to 
Copyright? 

Please identify the dollar value for each of the 5 categories you documented in your 
response for fiscal Years 2013, 2014, and 2015. 

A4. As mentioned in the Copyright Office’s initial response to Question 27, the Library 
provides certain day-to-day services to the Copyright Office, including some relating to 
IT, facilities, human capital, financial management, federal contracting, and other limited 
services. The Copyright Office, however, does not have the Library’s financial 
information for these services, and thus does not have the information necessary to 
identify the Library’s costs for providing these services. Indeed, we do not believe the 
Library has tracked or been required to track the value or cost of these services to its 
divisions. 

Likewise, although the Copyright Office administers provisions of the Copyright Act that 
inure to the benefit of the Library’s national collection by providing copies of 
copyrighted works that are consistently worth about $30 million dollars a year, this value 
has never been calculated as part of the fiscal relationship between the Library proper and 
the Copyright Office or the Copyright Office’s budget. 

Additional Questions: 

5. The Copyright Office received a number of comments on how modernizing the office 's IT 
and services should be funded. If the office makes the policy determination that 
modernization should be paid for solely with user fees, does the office currently have the 
statutory authority to include modernization costs in the "reasonable cost " of providing 
your services? If not, please provide the basis and the precedent for this determination. 

A5. The Copyright Office received sixty-three comments representing large and small 
copyright owners, and legal practitioners from across the country who are members of the 
American Bar Association and AlPLA, among others. Most of these overwhelmingly 
supported the Copyright Office’s 2015 draft IT plan. As directed, the Register of 
Copyrights sent a detailed letter to appropriators and authorizers on May 9, 2016, 
outlining the Copyright Office’s recommendation that modernization be funded through a 
50/50 split of fees to appropriations, and that ongoing operations otherwise should be 


3 



184 


funded through a split of 2/3 fees and 1/3 appropriations, especially taking into account 
the benefits of a modem copyright system to businesses that rely upon and use 
copyrighted works and data and the public wel&re. See Letter from M. Pallante, Register 
of Copyrights, to Hon. Tom Graves, Chairman, Subcommittee on Legislative Branch 
(May 9, 2016), available at http://\vww.copyright.gov/reports/usco-it-funding- 
strategy.pdf. 

In this funding strategy, the Copyright Office also reiterated its previous testimony that 
that the Register’s fee authority needs to be modernized to provide more statutory 
flexibility to assess costs in the aggregate, to assess certain capital costs and provide for 
multi-year spending, and to ensure appropriate flexibility to accommodate the general 
public and small copyright owners. In addition, recently it has become clear to both the 
Copyright Office and the Library that the agency needs to examine the Library’s practice 
of charging and retaining certain fees for the provision of bulk copyright data (a long- 
term process that appears to be related the Library’s sales of catalogs). This practice 
needs to be brought into alignment with the Copyright Office’s fee authority under 
Section 708 of the Copyright Act as well as the processes of the Administrative 
Procedures Act. And the Copyright Office will need more information regarding what it 
will be asked to contribute to the Library in terms of payment for services and what 
particular services are at issue and need to be costed. 

The Copyright Office’s fee-setting authority under Section 708 states that, for most fees, 
the Register may “adjust fees to not more than that necessary to cover the reasonable 
costs incurred by the Copyright Office for the services described in paragraph (1), plus a 
reasonable inflation adjustment to account for any estimated increase in costs.” 
Additionally, Section 708 states that these fees must be “fair and equitable and give due 
consideration to the objectives of the copyright system.” The Office strictly construes 
Section 708 to allow for pricing based only on the historical cost of providing the specific 
services set forth in Section 708, plus inflation, and does not interpret the provision to 
allow for pricing to include major capital expenses such as a complete modernization of 
Copyright Office IT enterprise, systems, cloud services and software. This is consistent 
with how the Copyright Office calculated fees during and since the Office’s first 
generation eCO online filing system. The Copyright Office looks forward to working 
with Congress to potentially expand its ability to adjust fees more flexibly. 

6. Does 1 7 U.S. Code § 708(b) allow for the ongoing costs of upgrading or replacing 

obsolete computer equipment and software to be considered in the "reasonable cost ” of 
providing your services? If not, please provide the basis and the precedent for this 
determination. 

A6. The Copyright Office does use some fees to fund, in part, the ongoing costs of 
upgrading or replacing obsolete computer equipment and software, which are considered 
part of the reasonable cost of providing the services set forth in Section 708(a)(l)-(9). 

The Library currently provides a large percentage of the Copyright Office’s hardware and 
software pursuant to appropriated dollars received by the Library. 
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7. The Copyright Office ’s Proposed Schedule and Analysis of Copyright Fees states that 
your office uses the "Federal Accounting Standards Advisory Board 's (FASAB) 
guidelines for determining the full cost of federal agency program activities and the 
Office of Management and Budget ’s (OMB) Circular A-2 5 Revised: User Charge 
document regarding costing guidelines and establishing user fees " for determining the 
reasonable cost of providing your services. Has your office sought guidance or 
recommendations from the FASAB or OMB on whether the expense of upgrading or 
replacing obsolete computer systems, infrastructure, and software should or could be 
accounted for in the cost of providing your services? If so, please provide any 
correspondence between your office and the FASAB or OMB on this issue. 

A7. In establishing its fees, the Copyright Office reviews and relies on the 
comprehensive public guidance issued by FASAB and OMB in determining the 
reasonable cost of providing services, but the current Copyright Office staff has not 
sought specific guidance or recommendations from either agency. 

8. FASAB guidelines state that the costs of computer equipment and software that are to be 
in use for over two years should be capitalized. Has the Copyright Office been including 
the expenses from depreciation or amortization of computer equipment and software in 
determining the “reasonable cost ” of providing your services? If so, please provide your 
depreciation/amortization schedules for computer equipment and software, and what 
dollar amount or percentage these expenses contribute to the “reasonable cost” of 
providing your services. 

A8. The Copyright Office relies on FASAB Sections 4 and 7 when assessing fees under 
Section 708, and these relevant provisions describe accounting for operating, and not 
capital, costs. The Office thus does not include the expenses from depreciation or 
amortization of computer equipment and software when determining the reasonable cost 
of Office services. 

9. Please describe in detail the authorities and responsibilities of ike Copyright 's Chief 
Information Officer. 

A9. The authorities and responsibilities of the Copyright Office’s Chief Information 
Officer are spelled out in the Library’s Position Description, a copy of which is attached. 

10. In your response to question 5. you indicate that the 2015 service level agreement 
(“SLA ") presented by the Library of Congress lacked .sufficient detail Please elaborate 
with specificity which details were lacking. 

A 10. As set forth in the Copyright Office’s prior correspondence with the Library, which 
is included in response to question 12, the Office identified many areas in the SLA as 
lacking in detail, including but not limited to; 

• An incomplete service desk catalog 

• Details on how identified metrics will be calculated, measured, and reported, and 
identification of any metrics related to customer satisfaction 
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• Details on the service unit costs for services related to desktop computing, including 
what software and updates are included in the Library’s provision of core services 

• Discussion of areas of service not mentioned in the SLA, including backup and 
recovery, asset management, remote access, and change management support (both 
administrator and engineering support) 

• Additional information on various items identified in the SLA’s Service Level Target 
Table including: 

o What is included in the services of Information Security Management 
o Whether servicing of laptops and desktops are included 
o Whether hosting services, mess^ing, and collaboration are available during 
prime hours and after hours 

• More granular treatment of availability metrics tailored towards the service offered, 
and an explanation of how services will be available at “99%” when each particular 
IT service is only available from the OCIO Service Desk during Normal Business 
Hours 

• Discussion of the refresh cycles for different types of equipment 

• Details regarding appropriate notification procedures and escalation paths 

• A mechanism for auditing and/or providing an independent verification and 
validation that the Library is fulfilling the services outlined in the SLA to the 
Copyright Office 

As mentioned above, the Copyright Office recently provided the Library with a copy of 
its proposed revisions to the draft SLA (a copy of which is also enclosed with this 
response), but this process has been overtaken by the Library’s communication to the 
Copyright Office yesterday in which it noted that it will focus not on SLAs but, rather, a 
service catalog and MOUs, 

11 . // is our understanding that the Copyright Office is the only service unit not to agree to 
the SLA. Why? 

AH. As noted above, the Library is no longer planning to utilize an SLA with the 
Copyright Office, but the Copyright Office did provide input regarding the draft SLA 
provided by the Library, including a markup of the Library’s draft. SLAs are important 
business documents and there will be multiple other SLAs as the Copyright Office 
modernizes, including with outside service vendors selected for various functions. 

More generally, the Copyright Office cannot speculate as to the actions of other major 
units with regard to their separate SLAs with the Library, but assumes that each service 
unit is driven by considerations based on its individual business needs. We respectfully 
note that no other part of the Library has as significant an IT requirement as the 
Copyright Office, which interacts with a global marketplace of content and technology 
platforms, and provides services to private parties who pay fees and rely on the Office for 
documentation and certification of intellectual property rights, licensing information and 
related business data. To this end, IT is a tool by which the Copyright Office carries out 
its statutory responsibilities. 
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12. Please provide all communications between Copyright and LoC regarding the SLA. 

A12. In response to this request, we are attaching communications of the Copyright 
Office Chief Information Officer and members of the Copyright Technology Office with 
the Library, including its OCIO, regarding the draft SLA presented to the Office in the 
summer of 2015. 

13. In your response to question #27 when asked about impact on the customer base should 
Copyright transition from under LoC you replied that a transition plan would be 
necessary. Has Copyright performed or commissioned any studies or analysis of this? 

A13. The Copyright Office has not performed or commissioned a study or analysis 
regarding the potential impact on the customer base during a transition period in the event 
Congress acts to establish the Copyright Office as an independent agency. See Response 
to Question 23 of the February 1, 2016 Questions for the Record. 

In responding to the previous question, the Copyright Office explained that the 
particulars of any transition plan would stem from the specifics of the authorizing 
legislation. For example, the Copyright Office tor the Digital Economy Act, H.R. 4241, 
includes language regarding the transfer of administrative functions, the potential for 
separate facilities, and a requirement that the new head of the Copyright Office provide a 
status report to Congress. 

14. Please describe the review process used by Copyright when determining whether or not 
to approve an SLA. 

A14. Under the Office’s current practices, members of the Copyright Technology Office 
and the Copyright Chief Information Officer would typically review an SLA to identify 
issues that might support or prevent adoption of an SLA. Once these issues have been 
resolved, the Copyright CIO would present the SLA for legal review to the Copyright 
Office, Office of General Counsel and, ultimately, for approval by the Register of 
Copyrights. This diligence reflects the fact that an SLA is by its nature a negotiated and 
binding document that affects the services the Copyright Office is required to provide 
under the Copyright Act. 

15. Please provide any memoranda of understanding or similar agreements between 
Copyright and the Library of Congress. 

A15. Please see attached. 
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189 


Scheffier. Elizabeth 
Friday, March 27, 2015 12:08 PM 
Ament, Douglas 

Re; ACF failover during annual shutdown (Aug 28-31) 


From: 

Sent: 

To: 

Subject: 


i would like us to do this 

Let me have us speak with the IT team on how to approach 
Sent from my iPhone 

On Mar 27, 2015, at 11:15 AM, Ament, Douglas < dament@loc.gov > wrote: 

Are we still okay with this? 

y 

From: Schiesier, Gustave 

Sent: Friday, March 27, 2015 11:01 AM 

To: Ament, Douglas 

Cc: Farraj-Feijoo, Ricardo; Wofford, Denise; Curtiss, Dan 
Subject: ACF failover during annual shutdown (Aug 28-31) 

Doug, 

Per your email last week, ! wanted to follow up with you to see If we are still a go for failing over to the 
ACF prior to the PCF weekend shutdown and failing back over following the shutdown. 

We need to start interfacing with the ITS folks due to the additional complexities involved with 
constrained resourcing and ingesting live data from the public as well as having refreshed the ACF 
hardware (planned) and converting the PCF and ACF to 64 bit. 

Please confirm with Liz that ITS can support this activity at your earliest convenience. 

Thanks, 

Gus 

Gustave Schiesier, PMP, MBA 

PM, CTO/eCO Project Program Manager 

Copyright Technology Office (CTO) 

United States Copyright Office 

101 Independence Avenue, SE 
Washington DC 20540-6001 
202.707.7451 - office 
202.252.3668 -fax 
gsch@ioc,gov 
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Ament, Douglas 

From: 

Farraj-Feijoo, Ricardo 

Sent: 

Monday, June 15, 2015 8:44 AM 

To: 

Ament, Douglas 

Cc: 

Curtiss, Dan 

Subject: 

Urgent discussion 


Liz just stopped at dunkin donuts and told us a very disturbing news. It is about the acf. Let us know when we 
can stop by. 

Sent from my iPhone 
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Ament, Douglas 

From: 

Sent; 

To: 

Cc: 

Subject; 

Importance: 


Ament, Douglas 

Monday, June 15, 2015 12:19 PM 
Farraj-Feijoo, Ricardo; Curtiss, Dan 
Christopher, David 
Security of ACF 

High 


Just got off the phone with Liz... 

She further explained that the issue at the ACF is not that the facility Is "un-secure", it's that they (ITS) do not have the 
proper monitoring in piace. As she explained, it seems that once the primary facility (Madison) goes down, the 
monitoring of the ACF goes down. It seems that the current IT security monitoring capability of the PCF is somehow 
inclusive of the ACF and that when power shuts down at the ACF in August, they'll lose the capability of monitoring the 
ACF environment(s)...!n other words, we're fine (from a monitoring perspective) as long as the PCF is up and running. In 
essence though, if the PCF goes down, shouldn't the ACF go down also?...at least we should be assured that there is no 
outside connectivity to the ACF if the PCF goes down. As we all know, if there isn't active monitoring going on, we have 
an unsecure system. 

To be clear, based on what Liz indicated, the reason this came to light was because we pushed to have the failover to 
the ACF. If we hadn't pushed, other SUs wouldn't have pushed and this wouldn't have been discovered. 

She would not put the above information in writing at this time but indicated she had notified her superior managers. 

I asked if she would be notifying Maria about this situation or If she would like me to notify her... I explained that now 
that i have this information, ! have a responsibility to notify Maria. She asked that she (Liz) be permitted to notify Maria 
given that, in her current operating capacity, she is a peer of Maria's. I told her that since there is no immediate threat, I 
would wait for her (Liz) to notify Maria of this situation. 

She indicated that they (ITS) would be providing a written message indicating that they would not be able to support the 
eCO failover during the August power outage at the PCF. 

She indicated they are taking Immediate action to remedy the situation as quickly as possible. 


Doug 
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Scheffier, Elizabeth 
Friday, June 19, 2015 12:00 PM 
Ament, Douglas 

August power shutdown and ACF support 


From: 

Sent: 

To; 

Subject; 


Follow Up Flag: Follow up 

Flag Status: Flagged 


As we discussed, the security issues at the ACF could compromise eCO operations. Therefore 1 am recommending 

against USCO running eCO at the ACF. 

thanks 

Elizabeth R Scheffler 

Interim Chief Information Officer 

Library of Congress 

101 Independence Ave SE 

Washington DC 20560 

202.707.6042 
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Ament, Douglas 


From: 

Pallante, Maria 

Sent: 

Sunday, September 06, 2015 10:17 AM 

To: 

Scheffler, Elizabeth 

Cc: 

Ament, Douglas; Curtiss, Dan; Farraj-Feijoo, Ricardo; Swann, Syreeta; Christopher, David; 
Charlesworth, Jacqueline 

Subject: 

Re: One of many future Qs 


Ironic since we just lost a million dollars in revenue 
Sent from my iPhone 

On Sep 6 , 2015, at 9:52 AM, Scheffler, Elizabeth < esch(5)ioc.gov > wrote: 

That would be the ACF but as 1 think you know we held on the failover test when I learned ITS had never 
invested in ITSecurity at the ACF. This has been known for years by ITS and no one thought it was worth 
the Imillion to ensure data integrity or system security. When I learned that in June, I redirected 
funds, the orders went in and were awarded last week. If the ACF was secure, Eco, Coneress.gov, 
momentum and CRS .gov would have been at the ACF a week ago Friday. No downtime for anyone. 

Yes the Librarian's office is aware. I notified them of the potential for a security breach in June. As soon 
as I knew they knew. 

Sent from my iPhone 

On Sep 6, 2015, at 8:39 AM, Pallante, Maria < mpalt@loc.eov > wrote: 

Regarding the AOC shutdown, one thing I want to review is whether there is an 
alternative to losing two days of business for this annual drill. Unlike the rest of the 
Library, we are a business. I would be surprised to learn that PTO completely shuts 
down during such testing exercises. Shouldn't the Library have provided for an offsite 
business base on a temporary basis? 
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SERVICE CNiT 
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CHIEF INFORMATION OFFICER, COPYRIGHT 
SL-2210 


Position Number: 

I. INTRODUCTION 

This position serves as the Chief Information Officer (CIO) for the United States Copyright 
Office (USCO). The role of Chief Information Officer (CIO) aligns with the Clinger Cohen Act 
which establishes the role of the CIO and is widely accepted as the best practice for executive 
management of Information Technology (IT) environments. The position is primarily 
responsible for establishing the enterprise IT posture and policy, facilitating information 
accessibility and enforcing the IT policy of the Copyright Office. The CIO forms the technical 
direction on behalf of the Register of Copyrights and the Copyright organization. The USCO 
CIO participates in executive level decision making representing all IT aspects of the Copyright 
Office. The CIO maintains oversight for essential Project, Program, and Portfolio management 
activities to ensure crucial IT projects are facilitated appropriately so as to realize strategic and 
operational objectives. The CIO provides strategic leadership airf direction for the USCO, IT in 
the planning, design, development, and implementation of information technologies to support 
the unique research and information needs of the business of the USCO. The CIO is responsible 
for USCO information technology strategic planning, administration, priority setting, 
information architecture and the acquisition and allocation of information technology resources. 
The CIO leads USCO in developing information technology policies and guidelines, and 
develops and designs innovative information technologies to improve operations, productivity, 
efficiency, effectiveness, and service delivery. The CIO will ensure USCO compliance with 
relevant Library-wide IT policy and related guidance provided by the Library of Congress. This 
position reports to the Register of Copyrights. 

II. MAJOR DUTIES AND RESPONSIBILITIES 

Strategic Leadership 30% 

The CIO ensures technical capabilities are aligned with, and support, the Copyright Office 
Mission, Vision and Core Values through development of the IT Strategic Plan and establishing 
IT annual objectives which satisfy the technology needs of the organization. Provides strategic 
vision and leadership for the development and implementation of information and content 
management initiatives and acts as ^vocate to enlist broad support for this vision via written and 
in-person communications with USCO senior managers and end users. Defines USCO IT 
strategy to address business and systems requirements through proven information and content 
management processes and techniques and secures new technologies in consultation and 
partnership with key stakeholders, especially senior management staff and officials at multiple 
levels. Participates in strategic and operational governance processes of USCO as a member of 
the senior management team. Integrates IT planning into agency decision-making, strategic 
planning, and budget planning cycles. Leads IT strategic and operational planning to achieve 
business goals by fostering innovation, prioritizing IT initiatives, and coordinating the 
evaluation, deployment, and management of current and future IT systems across the 
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organization. When appropriate, coordinates IT plans with those of the Library's Office of 
Strategic Initiatives and Information Technology Service directorate. 

The incumbent implements competent information and content management practices, including 
understanding business needs, project management principles, software development processes. 
System Development Life Cycle (SDLC) methodology, corrfiguration management, 
infrastructure component reliability and capacity measures, portfolio management, etc. Defines 
measures of success for assessing the effective and efficient use of IT resources and progress in 
meeting long range strategic and annual performance plan targets. 

The incumbent keeps current with trends and issues in the information management industry, 
including current technologies and prices. Advises, counsels, and educates senior management 
on the competitive or financial impact of these technologies. Promotes and oversees strategic 
relationships between internal IT resources and external entities, including government, vendors, 
and partner organizations. 

Contributes to the effective and efficient design and operation of resources management 
processes related to information management for the organization. 

Exercises Supervisory and/or Managerial Authorities 25% 

Exercises overall responsibility, as well as delegated authority, for the oversight and 
administration of Copyright Office-wide IT activities, maintmning a highly complex program 
within the Copyright Office. Evaluates current and proposed programs and recommends action 
to initiate, modify, or discontinue projects as appropriate. Receives administrative direction from 
the Register of Copyrights in terms of the broadly defined missions and functions of the 
Copyright Office. 

The incumbent is responsible for furthering the spirit, practice and goals of equal employment 
opportunity (EEO) by taking positive steps to ensure the accomplishment of ^irmative action 
objectives and by adhering to non discriminatory employment practices in regard to race, color, 
religion, sex, sexual orientation, national origin, age, or handicap. Specifically, incumbent 
initiates nondiscriminatory practices and affirmative action for the area under his/her direction in 
the following: (1) merit promotion of employees and recruitment and hiring of applicants; (2) 
fair treatment of all employees; (3) encouragement and recognition of employee achievements; 
(4) career development of employees; and (5) full utilization of their skills. 

Leads, plans, directs, and evaluates the research and analytical activities of the Copyright 
Technology Office. 

Manages Development of Information Technology Operations and Systems 20% 

The incumbent exercises overall responsibility, as well as delegated authority, for the oversight 
and administration of broad, emerging, and/or critical agency information and content 
management programs. Oversees the management of centralized and decentralized information 
and content management functions within USCO, ensuring effective operations and 
communications regarding IT initiatives. Ensures robust, reliable and redundant information 
technology environment which realizes optimal operational efficiencies while striving for 
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implementation of standards based IT platforms and data standatds so as to eliminate 
redundancies and improve interface and interconnectivity. The incumbent is responsible for 
identifying business requirements and ensuring effective planning, design, development, 
implementation, management, maintenance, and security of the USCO IT processes, technical 
architecture and infrastructure, and information which minimally includes, PCs, networks, 
telecommunications, applications development, web services, and user support. Directs IT 
operations including budget planning and execution, workforce planning and management, 
policy administration and work processes to efficiently and effectively achieve specified goals 
and objectives. Plans for, acquires, manages, and ensures the effective integration of IT staff 
(both government and contract) and non-personnel resources. 

The incumbent is responsible for developing, maintaining, and facilitating the implementation of 
a sound and flexible business reqmrements protocol and integrated information technology 
architecture. Serves as champion for technical improvements to enhance Copyright Office IT 
systems and capabilities. Maintains communication with internal and external community to 
insure technical relevance with improvements to the IT infrastructure and architecture. Assesses 
and makes recommendations on the improvement or re-engineering of the IT organization. 
Develops multi-year technical road maps for critical IT components jointly with appropriate 
business owners and leaders from both USCO and the Library of Congress. Upgrades and 
streamlines business requirements processes and the computing, networking, and desktop 
applications infrastructure. Enables collaboration across USCO, and with users, through a robust 
USCO technology infrastructure. Provides advanced programming and computing support for 
modeling and simulation, and statistical analysis. Provides support for web applications 
development to enable productive operations and dissemination of information. 

Maintains knowledge of information technology trends and emerging technologies and 
determines organizational fit by maintaining technical relevance through a combination of IT 
trade attendance and training. Identifies opportunities for the appropriate and cost-effective 
investment of financial resources in IT systems and resources, including staffing, sourcing, 
purchasing, and in-house development. Evaluates, assesses, and communicates risks associated 
with IT investments. Develops, tracks, and controls the IT technology annual operating and 
capital budgets. Provides accountability for the expenditure of IT funding. Develops business 
case justifications and cost benefit analyses for IT spending and initiatives. Directs the 
acquisition and management of contracts supporting USCO IT services and institutes efficient IT 
budget and contract administration leveraging economies of scale for IT acquisition with the 
Library of Congress. Exercises fiduciary responsibilities over the Copyright IT budget and 
contracts and continually strives to ensure efficient government IT spending is achieved with an 
objective of the elimination of waste and duplication. Responsible for planning and investment 
control related to Copyright Office IT resources. Determines long-range financial plans and 
strategies. 

IT Policy Development, and Regulatory and Security Oversight 15% 

Responsible for the formulation and administration of policies affecting technology that supports 
information management in USCO, ensuring consistency with those of the Library of Congress 
where appropriate. The incumbent plans, and implements policies and guidelines affecting broad, 
emerging, and/or critical agency programs relating to information management. Sets USCO- wide 
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policies, procedures, standards, and guidelines for the management and security of information 
and content management technology in USCO, including policies and standards for functions 
that operate on a decentralized basis within USCO. Directs and ensures the development, 
documentation, and implementation of all USCO policies, standards, and procedures related to 
the design, development, implementation, management, and security of information management 
and content management technology in USCO. Assesses policy needs and develops policies to 
govern IT activities. 

Ensures that USCO's technical infiastructure is appropriately integrated, where necessary, with 
the infiastructures of the service units within the Library of Congress. Assures that USCO 
systems meet all requirements in compliance with federal law, regulations, IT technology 
standards, and best practices. Directs the implementation of information security programs 
designed to anticipate, assess and minimize system vulnerabilities, and ensures that USCO 
information security programs are integrated with the information security programs of the 
Library of Congress. Ensures that information security programs adhere to applicable legislation, 
regulations, and guidelines. Establishes and enforces technical and security policy for all 
Copyright Office IT systems and identify, collect, and manage information to support corporate 
information policy for access and modification. Perpetuates continuous improvement of Ae 
security of Copyright information systems ensuring compliance with industry and government 
best practices for securing IT systems. 

Directs development and execution of an enterprise-wide disaster recovery and business 
continuity plan. 

Initiates and oversees projects to evaluate the utility of new and emerging technologies that could 
enable the Copyright Office to achieve its strategic goals more effectively. Initiates and 
advocates Copyright Office-wide IT enhancements and changes initiatives. 

Serves as USCO Representative/Liaisoa 10% 

The incumbent serves as the principal USCO representative to the Library of Congress, and other 
legislative, judicial and executive branch agencies on the broadest USCO matters related to the 
use of information technology within the Copyright Office. Ensures that the integration of IT 
technology efforts provide optimum customer service and security safeguards. Establishes and 
maintains effective working relationships with various high-level individuals, including members 
of Congress and their staff and senior managers and staff of other legislative, judicial and 
executive agencies. Encourages and participates in industry outreach to provide better services 
to customers and insures technical relevance of existing and future Copyright Office IT systems 
within intellectual property community 
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QUESTION 12 
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AmentjJDouglas^ 

From: 

Sent: 

To: 

Cc: 

Subject: 


Caldwell, Karen 

Tuesday, June 23. 2015 12:31 PM 

Scheffier, Elizabeth; Ament, Douglas; Banks, A!; Duda, Jim; Short, Stephen; Hoppis, Lisa; 

Ktutts, Mary; Simon, Donald; Elky, Steve; Laurente, Kristin; Wofford, Denise 

Daye, Stacian C.; Elmore, Nigel; Conklin. Judith; Lloyd, Karen; Mandeibaum, Jane; 

Jablonski, Edward 

Message on SLA Implementation 


Follow Up Flag: Follow up 

Flag Status: Flagged 


Dear ITSC members (sent on behalf of Nigel Elmore): 

In order to comply with the findings in the GAO-15-315 Report, the OCIO Service Level Agreement (SLA) 
Project Team is planning to meet with Ser\dce Units individually to review the proposed SLA document as a 
first step toward satisfying GAO’s recommendation. The SLA document will be distributed to the ITSC 
members following Interim CIO Liz Scheffier’ s review and approval, currently scheduled to occur on or about 
June 30'". 

The SLA Project Plan calls for OCIO Senior Management and the SLA Project Manager to meet separately 
with each Service Unit’s representatives to review the proposed SLA document as a first-step toward 
implementing the use of IT SLAs in the Library. Our goal is to meet and finalize the SLA document with all 
Service Units by September 7’^, 2015. 

We ask that you identify the person(s) who will ser\'e as your respective Service Unit SLA representative or 
point-of-contact, one primary and an alternate (the alternate will participate when the primary is not 
available). Please send their names to Staci Daye (SLA Project Manager) by close of business, .Tune 25^^, 
201 5. You may contact Staci via email at sdave@loc.aov or by telephone at X7-9788, Please cc: Nigel Elmore 
(ITIMPO) nelm@loc.gov on your response. 

Please contact A1 Banks at aIba@ioc.gov or X7-9562 or Staci Daye if you have any questions. 

Sincerely, 


Karen F. Caldwell 
(202) 707-3797 
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Ament^Dougila^ 


From: 

Ament, Douglas 

Sent: 

Tuesday, June 30, 2015 11:32 AM 

To: 

Daye, Stacian C. 

Cc: 

Farraj-Feijoo, Ricardo 

Subject: 

RE: Message on SLA Implementation 


Sorry Stacey for providing incomplete information. 
Please list KanKan Yu as the alternate. 

Doug 


From: Farraj-Feijoo, Ricardo 

Sent: Monday, June 29, 2015 6:54 PM 

To: Ament, Douglas 

Cc; Farraj-Feijoo, Ricardo 

Subject: Re: Message on SLA Implementation 

KanKan should be the secondary on this one. 

Sent from my iPad 

On Jun 29, 2015, at 4:18 PM, Ament, Douglas < dament@loc.eov > wrote: 

Who do you want to be the alternate? 

From; Daye, Stacian C. 

Sent: Monday, June 29, 2015 4:14 PM 

To: Ament, Douglas 

Cc: Elmore, Nigel; Banks, Al 

Subject: RE: Message on SLA Implementation 

Hi Doug, 

Thanks for your response, I have Ricardo as the primary POC, can you please provide me with the name 
for the alternate POC? 

Staci 

<image001.png> 

Stacian C Oaye 

office of Strategic Initiatives/ 

Information Techno fogy Services 
‘Emaih sdaye@(oc.gov 
Thom: 202-707-9788 
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From: Ament, Douglas 

Sent: Wednesday, June 24, 2015 5:21 PM 

To: Daye, Stacian C. 

Cc: Elmore, Nigel 

Subject: FW: Message on SLA Implementation 

Please make Ricardo Farraj-Feijoo the POC for this initiative. 

Thanks, 

Doug Ament 


(Doiiglas Jiment 

Cfiief Information Officer, VS CopyrigHt Office 
101 Independence Jive, SV, £.94-403 
Hlasfiington, cDC 20540 


From: Caldwell, Karen 

Sent: Tuesday, June 23, 2015 12:31 PM 

To: Scheffler, Elizabeth; Ament, Douglas; Banks, Al; Duda, Jim; Short, Stephen; Hoppis, 
Lisa; Klutts, Mary; Simon, Donald; Elky, Steve; Laurente, Kristin; Wofford, Denise 
Cc: Daye, Stacian C.; Elmore, Nigel; Conklin, Judith; Lloyd, Karen; Mandelbaum, Jane; 
Jablonski, Edward 

Subject; Message on SLA Implementation 

Dear ITSC members (sent on behalf of Nigel Elmore); 

In order to comply with the findings in the GAO-15-315 Report, the OCIO 
Service Level Agreement (SLA) Project Team is planning to meet with Service 
Units individually to review the proposed SLA document as a first step toward 
satisfying OAO’s recommendation. The SLA document will be distributed to the 
ITSC members following Interim CIO Liz Scheffler’ s review and approval, 
currently scheduled to occur on or about June SO*. 

The SLA Project Plan calls for OCIO Senior Management and the SLA Project 
Manager to meet separately with each Service Unit’s representatives to review the 
proposed SLA document as a first-step toward implementing the use of IT SLAs 
in the Library. Our goal is to meet and finalize the SLA document with all 
Service Units by September 7'*', 2015, 

We ask that you identify the person(s) who will serve as your respective Service 
Unit SLA representative or point-of-contact, one primary and an alternate (the 
alternate will participate when the primary is not available). Please send their 
names to Staci Daye (SLA Project Manager) by close of business, June 25*, 
2015, You may contact Staci via email at sdave@loc.gov or by telephone at .X7- 
9788, Please cc: Nigel Elmore (ITIMPO) nelm@loc.gov on your response. 

Please contact Al Banks at alba@.l oc.gov or X7-9562 or Staci Daye if you have 
any questions. 


2 



Sincerely, 


Karen F. Caldwell 
( 202 ) 707-3797 
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Yu, KanKan 

From: 

Daye, Stacian C. 

Sent: 

Monday, July 13, 2015 4:01 PM 

To: 

Farraj-Feijoo, Ricardo 

Cc: 

Yu, KanKan; Conklin, Judith; Banks, Al; Bucknor, Vanley 

Subject: 

RE: HOLD - U.S. Copyright Office (COP) SLA Review Meeting 


Yes, the meeting invitation will be updated tomorrow to include the reference material needed to prepare for 
Thursday's discussion. 

Staci 


LIBRARY OF 
CONGRESS 


Stacian C 0(^e 
Office of Strategic Initiatives/ 
Inffrmation Tecfinolbgy Services 
^maiC- sdaye@lbc.gov 
(Phone: 202-707-9788 


From: Farraj'Feijoo, Ricardo 
Sent: Monday, July i3, 2015 3:56 PM 
To: Daye, Stacian C. 

Cc: Yu, KanKan; Oanklin, Judith; Banks, Al; Bucknor, Vanley 
Subject: RE: HOLD - U.S. Copyright Office (COP) SLA Review Meeting 


Forgot to ask, Is there any reference material we (Copyright) should review before the meeting? 
Thanks! 


From; Daye, Stacian C. 

Sent: Monday, July 13, 2015 3:44 PM 
To; Farraj-Feijoo, Ricardo 

Cc: Yu, KanKan; Conklin, Judith; Banks, Al; Bucknor, Vanley 
Subject: RE; HOLD - U.S. Copyright Office (COP) SLA Review Meeting 


I will submit a ticket to request one. How many participants are you expecting to call in? 


Staci 

« OLE Object; Picture (Device Independent Bitmap) » 
Stacian C 

Office of Strategic Initiatives/ 

Information technology Services 
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‘EmaiC sdaye@lbc.fiov 
Ehom: 202-707-9788 


From; Farraj-Feijoo, Ricardo 
Sent: Monday, July 13, 2015 3:40 PM 

To: Daye, Stacian C.; Yu, KanKan; Conklin, Judith; Banks, Al; Bucknor, Vanley 
Subject: RE: HOLD - U.S. Copyright Office (COP) SLA Review Meeting 


Would a conference bridge be provided? Thanks! 

— Original Appointment — 

From: Daye, Stacian C. 

Sent: Thursday, July 09, 2015 7:42 PM 

To; Daye, Stacian C.; Farraj-Feijoo, Ricardo; Yu, KanKan; Conklin, Judith; Banks, Ai; Bucknor, Vanley 
Subject: HOLD - U.S. Copyright Office (COP) SLA Review Meeting 

When: Thursday, July 16, 2015 11:30 AM-12:30 PM (UTC-05:00) Eastern Time (US & Canada). 
Where: Automation Orientation Center LM-G45 


*Update: Please note the time change to accommodate changes to a key participant's schedule. 
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Ament, Douglas 


From: 

Daye, Stacian C. 

Sent: 

Thursday, July 16, 2015 10:07 AM 

To: 

Farraj-Feijoo, Ricardo 

Cc: 

Yu, KanKan; Conklin, Judith; Banks, Al; Bucknor, Vanley; Wilson, Tina; Hoppis, Billy: 
Balakrishnan, Bhaskaran; Nelson, Carrie A.; Ament, Douglas 

Subject: 

RE: U.S. Copyright Office (COP) SLA Review Meeting 


Good morning, 

I will reschedule the meeting for next week. Wishing you a speedy recovery! 

Thanks, 

Staci 


Stacian C. Daye 
Office of Strategic Initiatives/ 
Information Technology Services 
Email: sdave@loc.gov 
Phone: 202-707-9788 


— Original Message 

From: Farraj-Feijoo, Ricardo 

Sent: Thursday, July 16, 2015 8:51 AM 

To: Daye, Stacian C. 

Cc: Farraj-Feijoo, Ricardo; Yu, KanKan; Conklin, Judith; Banks, Al; Bucknor, Vanley; Wilson, Tina; Hoppis, 
Billy; Balakrishnan, Bhaskaran; Nelson, Carrie A.; Ament, Douglas 
Subject: Re; U.S. Copyright Office (COP) SEA Review Meeting 

I am requesting for this meeting to be reschedule till next week. I had surgery yesterday and I won't be able to 
be physically there. Sorry for the late notice. I rather be in person to ensure Copyright comments regarding this 
document are well understood. 

Can someone please acknowledge my request. Thanks 

Sent from my iPad 

> On Jul 1 5, 2015, at 5:37 PM, Daye, Stacian C. < sdave@loc.gov> wrote: 

> 

> Update: Due to space limitation the meeting location has been changed to Afs office. 

> 

> - 

> All, 
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> In order to comply with the findings in the GAO-15-315 report, we are working on preparing a Draft Service 
Level Agreement (SLA) document (Please see attached). It is indeed a draft, and over the next few weeks we 
will use your comments for the purpose of revising and polishing the draft, as well as, gathering requirements 
for inclusion in future phases. 

> 

> During this meeting, please share with us your requirements and your suggestions for improving the SLA 
document. As you do so, please bear in mind that the Draft SLA document is focusing more on Commodity IT 
Services during this phase while touching on Service Level Agreements. 

> 

> Please call the number listed below if you are joining this meeting remotely. 

> Dial-in: 202-707-1877 

> 

> Please do not hesitate to reach out to me with questions and/or comments. 


> Thank you and I look forward to meeting with you. 


> Thanks, 

> Staci 

> 

> 

> Stacian C, Daye 

> Office of Strategic Initiatives/ 

> Information Technology Services 

> Email: sdave@lQc.gov<mailto:sdave@loc.gov > 

> Phone: 202-707-9788 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> <DRAFT_ COP _Service__Level_Agreement__07 1 6 1 5 v 1 .doc> 
><ATT37588> 

> <meeting.ics> 
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Curtiss, Dan 

Subject: 

Location: 

FW: U.S. Copyright Office (COP) SLA Review Meeting 

LM637- Edison Conference Room Conference Bridge: 202-707-1877 

Start: 

End: 

Mon 7/20/2015 3:00 PM 

Mon 7/20/2015 4:00 PM 

Recurrence: 

(none) 

Meeting Status: 

Accepted 

Organizer: 

Daye, Stacian C. 


Original Appointment 

From: Daye, Stacian C. 

Sent: Thursday, July 09. 2015 7:42 PM 

To: Daye, Stacian C; Farraj-Feijoo, Ricardo; Yu, KanKan; Scheffler, Ellzalaeth; Conklin, Judith; Banks, Al; Bucknor, 
Vanley; Hoppis, Biliy; Balakrishnan, Bhaskaran; Wila^n, Tina 
Cc: Nelson, Carrie A. 

Subject: U.S. Copyright Office (COP) SLA Review Meeting 

When; Monday, July 20. 2015 3:00 PM-4:00 PM (UTC-05;00) Eastern Time (US & Canada). 

Where; LM637- Edison Conference Room Conference Bridge: 202-707-1877 


Update: Please note the following changes: date, time and location. 


All 

In order to comply with the findings in the GAO-15-315 report, we are working on preparing a Draft Service 
Level Agreement (SLA) document (Please see attached). It is indeed a draft, and over the next few weeks we 
will use your comments for the purpose of revising and polishing the draft, as well as, gathering requirements 
for inclusion in future phases. 

During this meeting, please share with us your requirements and your suggestions for improving the SLA 
document. As you do so, please bear in mind that the Draft SLA document is focusing more on Commodity IT 
Services during this phase while touching on Service Level Agreements. 

Please call the number listed below if you are joining this meeting remotely. 

Dial-in: 202-707-1877 

Please do not hesitate to reach out to me with questions and/or comments. 

DRAFT. COP 
_Service_Level_A,,. 


I 
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Thank you and I look forward to meeting with you. 


^Than^, 

Staci 


i UBRARYOl 
: CONGRfcSS 


Stadan C <Daye 
Office of Strategic Initiatives/ 
Information ‘Tecfmolbgy Services 
^EmaiC sdaye@kc.gov 
(Pfione: 202-707-9788 
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1.0 lNriU>nUCT!ON 


1.1 Overview of CIO 

The Chief Information Officer (CIO) ensures the effective delivery of information 
technology resources and services in support of the Library's mission, functions, and 
activities. The mission of CIO is to provide reliable and effective information systems 
and telecommunications services to the Library in support of its efforts to serve Congress 
anci the nation, manage its collections, and plan, design, and implement systems which 
define the future digital library and information infrastructure. ‘ 

1.2 Scope of Agreement 

This is a Service Level Agreement (SLA) between ClOiand the Library of Congress (LOC) 
United States Copyright Office (COP). The purpose of this SLA'is.,to establish baseline 
support levels for commodity IT sercdces thatare provided bv CIO fe'COP. 

This SLA is binding upon CIO and COP. The GI© and GGP may change this agreement 
when service issues arise, new technologies develop, or requirements change. All 
modifications must be agreed upon by both the CIO and COP. CIO and COP agree to 
engage in good-faith efforts to resolve any. problems which may arise. 

As needed and appropriate Memoranda of Agreement (MOUs) will establish support 
levels for specialized Cl© support not coyeredin this agreement. 

1.3 Assumptions ' 

This agreement reliesson certain operational assumptions. Should any of these 
assumptions change, then the CIO and COP will negotiate and agree upon any necessary 
adjustments to thisagreement. a- 

♦ Support leveisiestablished by this agreement will be provided. 

♦ All IT-related mapdates, such as regulatory or Congressional, have been accounted 

■for in this SLA. f* 

1.4 Ou rsiDE CIO'S Control 

The services provided under this SLA may be temporarily suspended in part or in full by 
the CIO or other LOC or U.S. Government officials in the instance of unplanned, 
widespread, service-affecting i.ssues. The .services will be considered to be in "reduced 
service mode" in the instance of service-affccting issues which render the entire LOC 
enterprise unusable or severely degraded, these may include: 

♦ Certain Department of Homeland Security (DHS) alerts; 

» Severe weather or other natural occurrences like earthquakes, asteroid strikes, etc. 
which affects wide-area communication links, or utility services or prevents 
technicians from reaching their workplaces; 

♦ A Government shutdown, declared by the Office of Personnel Management; 

♦ Certain security threats anti attacks; and. 
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4> Scheduled life & safety testing; 

Restoration of services covered under this SLA may be subject to factors outside of CIO's 
control. These may include vendor lead time (for purchases or vendor-provided repairs) 
and service provider lead time. 


2.0 ITSirvkt.s 


The services listed here arc standard, meaning that these services are provided at no 
adciitional cost to COP. Should resource requirements or the availability of resources 
change significantly, then the CIO and COP will make necessary modifications to this 
agreement. 

As noted by the Federal Information Technology Shared. Services Stratcgv h and the 
Federal IT Shared Services Implementation Guide^ , there are three general categories of 
shared services in the Federal Government: commodity IT, support, and mission services, 
as described below: 

' 

1. Commodity IT - As described in OMB Memoiafidum M-ll-29, 'i examples of 
commodity IT shared services opportunities include: 

• IT hifrastructure (e.g., data centefe^ietworks, workstations, laptops, software 
applications, and mobile devices); and , ■ 

• Enterprise IT services (e.g., e-Mail, w’eb mfrastructure, collaboration tools, security, 
identity and access management). Commodity IT is asset-oriented, while 
enterprise IT services mav, at times, be more utility-oriented (defined as 
purchasing by usage rate). 

. . S' 

2 . Support Services - Are defined by the capabilities that support common business 
functions perforrhedby nearly all Federal organizations. These include functional areas such 
asbudgeting, financial, human resources, asset, and property and acquisition management. 

3. Mission Services - These are core purpose and functional capabilities of the Federal 
Government; such as disaster response, food safety, and national defense and employment 
services. Some Mission Services may have a single Federal organization focused on providing 
that service, while other mission services have multiple Federal organizations providing parts 
of a service, This may be due to statute, budget or other unique capabilities an agency may 
have developed. 

The scope of this SLA will cover Commodity IT Services. 


' I'ccicral Informiitioii I'cchnologv Shared Services Strategy', Office of Managemcnf and Budget (OMB), Office of E- 
(.jov-ernment ;uul Inlormalion I cchnolog}’. May 2, 2012 

!lL!p__ u'vw " hi't h’ lll^c go\ -lie s det . iiill ' files,'’ oin'li./asscts/egov docs.-^shared scnu ce s sin iregv.pdl 
- I’edcva! Inlormatioii i cchnologv Shared Services Implementation Guide, CIO Council, .\prt! 1.“^. 20l.> 

I mps tb'gt" uplmds. downloads./ 201.>.<’'04./C10C-Fedcra3-Shared-Sci'\Tccs--]mpk‘mcn ta lion-(.; uidc.pdf 

’ <..)thce ot Managcmenr and Budget (O.MB), M-1 1-29 . Cliief Information Officer -Authorities. August «. 2011 

2 1 P « a 
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3.0 Syst i-ms Main i fnance & Poli cy __ _ 

The following ex’ents mov impact on service availability: 

> Planned maintenance windows - CIO is required to update and maintain the 

technical infrastructure on a regular basis per Maintenance Policy dated July 1. 2013. 
The agreed change windows for this work are: 


♦ Maintenance activity that is expected to take less than 4 hours will take 
place on the first and third Tuesday of each month beginning at 9:00pm 
Tuesday and ending by' 3:00am on Wednesday; 

» Maintenance activity that is expected to take less than 12 hours to complete 
will take place on the second and fourth Sunday of each month beginning at 
6:00am and ending by 6:00pm the;same day; 

♦ Maintenance activities will be'suspended for certain periods during which 
maintenance may disrupt special events that require uninterrupted service, 
e.g., when Congressional activities are in progress, the National Book 
Festival. The CIO and the SU will identify these events and coordinate 
maintenance accordingly; and.., ^ 

♦ Emergency system maintenance 4 From time to tune critical maintenance, 
such as ui-gSht, security patches, may need to be performed within business 
hourSiWhich may impact on service availability. Staff will be notified and 
all attempts will be made to minimize the business impact of the changes. 

Maintenance windows are nof ineluded m the availability column of the SLA. 


4.0 Rolks .\Nn Rrsro.NsiBii rTii,*; 


4.1 CIO Rfspovsiihlities 

CIO has the following general responsibilities under this agreement, 

♦ Conduct business in a courteous and professional manner with clients; 

♦ Meet re,sponse times a.ssociated with the priority assigned to client issues; 

* Ensure statt are appropriately trained and currency of training is maintained; 

* Maintain adequate escalation procedures with the Priority' Matrix table; 

» Log an track all client requests for sen'ice through the Service Desk System 
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4.2 U.S. Copyright Office Responsibilities 
COP agrees to: 

♦ Be familiar with the CIO policies and procedures for governing the acceptable use 
of information and communication technologies and adhere to same; 

♦ Follow appropriate notification procedures 

» Determine appropriate support issue priority( P1-P6) in corporation with the 
Service Desk; 

♦ Be willing and available to provide critical information within [X Timeframe] of 
logging a request with the Service Desk for any urgent matters. 


5.0 Periodic Review Process 


This SLA is a dynamic document and will be periodically reviewed and changed when 
the following events occur: 

♦ The environment has changed. A ' 

♦ Business requirements have changed;: Mforkloads have changed. 

♦ Better metrics, measurement tools and processes have evolved. 

This Service Level Agreement will be reviewed scmi-anaually in fiscal 2016 and annually 
for commodity level. Contents of this document may be amended as required, provided 
mutual agreementis:obtained;;|nd communicated to all affected parties. The Document 
Owner will incorporate all subsequent revisions and obtain mutual agreements / 

''' A 


approvals asr%q,uired. 

vXv. 

Document Owner: 

Review Period: 

''''•'■'iii 

Previous Review Date. # 

Next Review Date: 
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5.0 SlGNAlUKiS 


Title & Name Date 

Senrice Provider and Document Owner 


Title & Name 
Customer 


Title & Name 


Title &c Name 
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Appendix A: Definitions, Abbreviations, and Acronyms 


Aea'i’ss 

1 Ite process responsible for allowing users to makv* of i I ser\ ices, 

data or other assets. Access management helps to protect the 
confidentiality, integrity and availability of assets by ensuring that only 
authorized users are able to access or modify them. 

Asset 

Any resource or capability. The assets of a service provider include 
anything that could contribute to die deliverv of a service. Assets can be 
one of the following typ^: management; organization, process, 
knowledge, people, information, applications, mtrastructure or 
financial capital. ; 

Audio & Video 
Teleconferencing (VTC) 

Audio & Video Teleconferencing Conferencing services provides 
technology and supporfeto aid in the presentation and communication 
of relevant content and information to Library staff, mxd special evcmts 
during normal business hourSi. ' Vo 

Availability 

Availability of an IT service is d-^ermined by reliability, 
maintainability, serviceability", p^ormance and security. Availability is 
usually calculated as a percentage. Thi§ calculation is often based on 
agreed service^time and downtime. 

Commodity IT 

Core services which inctaderIT itifrastructure (e.g., data centers, 
networks, workstations,iaptops;- software applications, and mobile 
devices); and Ft ■». A 

Enterprise IT services (e.g., e-Mail,-web infrastructure, collaboration 
tools, security, idenhty and access management), Commodity IT is 
asset-oriented, while enterprise IT services may, at times, he more 
utility'^oriented (defined as purchasing by usage rate). 

Congress 

Where an incident dty.task affects any congressional web site hosted on 
or in development bv a LC system or team. 

Database 

Administration 

Supports.Libraiy databases/database applications by developing 
architecture; establishing standardvS, monitoring, managing, and 
addressing security related issues to databases. 

Desktop Computing 

This service provides support services for workstations and connected 
peripherals. Including print services which enable all computers 
connected to the LOC netw'ork, including staff laptops connected 
wirelessly, to print to large multi-function devices and small desktop 
printers. 

Devices 

Mobile Devices - Need-Definition 

DHS 

Department of Homeland Security 

Division / Office 

Where an affected system or service supports a building/ floor/partial 
floor/ division/office. 

Email 

Enterprise email supporting internal, employee to employee(s), or 
external, employee to customer, vendors, or business partners. 

Enterprise 

Where an incident or task affects a majority of Library users. 

Extended Tasks 

Consists of long term tasks that are not Projects and are not routing 
tasks which may require 1 to 6 montlis to complete. 
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I I' ' ;ting Services 

This service provides support services inU’vnj] Iv’ I CX’ ein ii-onmont 
coiTvprising of the following: 

• Application 

• Database 

• Server 

• Storage 

• Infrastructure 

Impact 

Impact is a measure of the extent of perceived effect to systems or users 
and the potential damage to the organization before the incident or ticket 
is resolved. 

Individual 

Where the requestor is a single usci ,, 

Information Security 
Management 

This service provides the protection of the^Librarv information and 
information structure assets against the risk of loss, nususe, disclosure 
or damage. Develops, implements, and manages, the controls that 
ensure that the Library smianaging these risks, 

Internet (ISP) 

Services provide fast and'Secure network connectivity- to the Internet. 

LOC 

Library of Congress 

Messaging & 
Collaboration 

This sei'vice provides tools and capabilities that allow users to 
communicate and collaborate. This includes systems such as (e.g., 
SharePoint, Instant Messaging and GroupWise). 

Mission Services 

Mission Services ate.core purpose and functional capabilities of tlie 
Federal Government; such as disaster response, food safety, and 
national defense and employmentservices. Some Mission Services may 
have a single Federal organization focused on providing that service, 
while.other mission services have multiple Federal organizations 
providing parts of a service. This may be due to statute, budget or otlier 
,unique;capabilitics an agency may have developed. 

Mobile Device 

This service pr.ovide.s the mobile devices and capabilities that allow 
users to access Library technology refiources when not at their duty 
stations. 

MQU 

Memorandum of Understanding - A MOU is a formal agreement 
between the;CIG and a SU. MOUs shall be used bv the CIO as follow- 
on documents to the baseline SLA for the purpose of defining new or 
expanded services which are either not defined within the baseline SLA 
or which need to be redefined. 

Normal Business 

Hours 

[he time period when a particular IT service is available. Services will 
be provided between the hours of 7:00 a.m. and 5:00 p.m., Monday 
through Friday. (*Noie: See Sewice Desk) 

CIO 

Chief Information Officer - CIO ensures the effective delivery of 
information technology resources and services in support of the 

Library's mission, functions, and activities. 

Priority 

The measure of response expected from a Fulfilment Group or incident 
management team. Allowed response times are measured in minutes, 
hours and days. 

PI 

Priority 1- During a PI incident the CIO will, within 15 minutes, 
mobilize the resources required to work the incident. Management will 
be informed and a PAO Announcement may be generated and 
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delivered to the Public Affairs Office for distribution. Witliin 4 
working hours the CIO will resolve tlie incident. 

P2 

During a P2 incident tlie CIO will, within 30 minutes, mobilize tlie 
resources required to work die incident. Managemt^nt will be informed 
and a PAO Announcement may be generated and delivered to the 

Public Affairs Office for distribution. Within 8 working hours the CIO 
will resolve the incident 

VIP Service Requests will he assigned a P2 priority. Where a VIP 
request is added to a Fulfillment Group queue the request will be 
treated as first in queue and fulfilled widi the least delay. 

P3 

Routine requests will be assigned this^prioritv'^ level except for VIP 
requests. P3 requeste will be placed m queue and fulfilled in turn 
(FIFO) by a Fulfillment Group.(s). The Fulfillment Group{s) will 
respond to the request within 4 working hours-.and resolve the request 
within 5 days. 

Use this priority where anincident has occurred wTiich does not have 
an immediate operational impact or where a workaround is available to 
the user. ^ 

P4 

A low priority request that does not immediately impact the ability for 
a person or team to complete their assigned tasks. P4 requests will be 
acknowledged.withinione day and will be resolved within 10 business 
days. ^ 

P5 

Assign requests received from:RrQject Teams to this category. The 

Project Team will establish the maximum time for fulfillment with the 
Fulfillment Group(sy; The Fulfillment Group(s) will have 8 working 
hours to review the request and respond to the Project Team and 30 
days to resolve the request. All requests will be fulfilled by the 
requested^or agreed upon date. 

P6 

Non-routine tasks which have extended completion times will be assigned 
this priority. 

PrI6r^%fa^ 

/fatrix 

ITie Priority Matnx establishes categories of urgency and acceptable 
response times for a jdven incident or Service Request. 

Processes 

Routine Service Requests which require multiple steps or an extended 
period to fulfill which do not directly affect a specific user. An example 
would include a change request for software to be approved which 
Ti^quires an extended amount of time to fulfill due to the number of 
steps and groups involved. 

Project Support Tasks 

Service Requests originating from a Project d'eam. To be used where a 
Project J’cam requires support from a Imltillment Group outside the 

Project Team. 

Public 

Where the system or service is commonly available to the general 
public. 

Resolution Time 

The measure of time an incident or Service Request can remain in a 
non-resolvcd status before an SLA Breach occurs. 

Response Time 

Mow long a Fulfillment Group or incident management team has to review 
a ticket and begin a response. 

Service 

A means of delivering value to customers by facilitating outcomes 
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customers want to achieve without tire ownership of specific costs and 
risks. 

Service Desk 

The single point of contact between the service provider and the users. 

The Help Desk will answer phone calls and email from our LC End 
Users, 24 hours a day, and 363 days a year, to open trouble tickets. The 
Help Desk is closed on ttie two holidays July 4th and Christmas. Work 
on tickets opened after hours and on weekencis or holidays will begin 
at 7:00 AM the next business day. 

Service Desk Catalogue 

A structured document with information about all live IT services, 
including those available for deplo?^€nt The service catalogue is part 
of the service portfolio and contains information about two type of IT 
service: customer-facing services tihat are visible to the SUs; and 
supporting services required by die service provider to deliver 
customer-facing services,: ■ • p 

Service Level Targets 
(SLT) 

Service Level TargetssJSL^ - SLTs are event-driven performance 
criteria which give context tOYmeasures and provide a mathematical 
basis to understand organizational^performance. 

Service Request 

A request for a routine service hasrbeen submitted and will be routed to 
a FulfillmentGrpup for action. There are no users or systems 
experiencing an incident. s : 

Service Unit 

Where an affected system»service supports all or the greater part of a 
Service U,iit. ' 

Significance 

- A term used to idGntify;fhe differ^t priority levels as a measure of 
importance to the organization. 

SLA 

Service Level Agreement - The SLA specifies how specific services 
related to the operation management of the commodity IT services 

will be measured. 

Service Level Agreement - An SLA is a document that establishes an 
i.agreement,between an IT service provider and a client to describe IT 
services, specify the responsibilities of botli parties, and document the 
expected service-level targets 

SU 

SeWice Unit 

Support Services^ 

Support services are defined by the capabilities that support common 
business functions performed by nearly all Federal organizations. 

'Fhesc include functional areas such as budgeting, financial, human 
resources, asset, and property and acquisition management. 

Telecommunications 

This service provides solutions that support the LOG 
telecommunications needs. This includes the following: 

• Voice: Support for telephony tools, hardware, software, and voice 
data infrastructure 

• Data: Support for tools, hardware, and infrashucture that supports 
data transmission. 

• Facilities: Oversight support for the Library data center, to include 
power, location, and cabling. 

Telework 

This service provides support for an employee to perform work, during 
any part of regular, paid hours, at an approved alternate worksite (e.g. 
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home or telework center). 

Urgency 

Is a means for categorizing how quickly an incident or ticket needs to 
be resolved. 

VIP 

Where the requestor or the requestor s assistant appears on the 
approved VIP list 

Wireless 

Services provide secure network connectivity to the LOC wireless 
network for staff and the general public. 

Work Degradation 

Where an IT system continues to be useable but performs below normal 
operating levels. A system may be slow to respond to user requests or 
part of a system may fail entirely with other parts continuing to 
function. . s;/ - 

Work Stoppage 

An interruption of IT services or access to one or more systems which 
results in one or more users not being able to'perform routine assigned 
tasks which tliey are normally able to perform. 

Support Services 

Support services are defiited by the capabilities fhat-support common 
business functions performed by nearly all Federal organizations. 

These include functional ar^s such.as budgeting, financial, human 
resources, asset, and property and acquisition managernent. 
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CTO Collective Comments on DRAFT "Service Level Agreement (SLA) between the United States 
Copyright Office (COP) and The Chief Information Officer (CIO)" 

General Comments; 

1) Services are not clearly defined in document. While the document contains good information, it 
is not cogent and organized for the Business to understand what common IT services are 
provided across the enterprise. As the business utilizing shared IT services, we should be looking 
at menu of services where we can pick and choose what we would like to leverage today and 
possibly in the future. The "How that service is provided" should also be provided within the 
document - a "recipe" per se. 

Analogy : We use the restaurant analogy. When you go to the restaurant, you see a menu - in 
this case, a service catalog -that informs you on what can be ordered, what you can expect to 
be on your plate, when it is going to be served (appetizer, entree, post-meal dessert, etc). Once 
you place your order, the chef puts the meal together using recipes that lists ingredients, 
amounts to use, cook times etc. 

For service catalogs (business and technical), the service needs to be defined overall, then 
detailed metrics need to be defined, targets for those metrics, how the metrics will be measured, 
and how metrics will be reported. For example, the document says “99% availability" but does 
not specify availability of what. 

CTO would like to see other information as well: 

a. Clear service definition that includes a description and outline of services 

b. Excluded services, if any 

c. Points of contact if the Business would like to request a service 

d. Performance Metrics and other KPIs 

e. Affected Customers 

f. Service Charges (if applicable) 

2) In the draft Directive, it states that the baseline of services paid for by ITS will be whatever they 
provided in January 2015. Two big problems with this: 1. It will take quite a while to document 
what they are already providing at a detailed level, and 2) it doesn’t seem fair to start charging 
for additional services now when SUs can't build that funding into their budgets until FY17 at the 
earliest (maybe FY18?). 

3) Does ITS currently have the tools and processes in place to make this happen efficiently and 
report out successes and failures in meeting SLAs? If not, CTO does not see how much value this 
will bring in the short term until a "to-be" state is established. 


Detailed Comments 
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1) Section 1.1 - "Overview of the CIO" 

Should this be the OCIO? Please make this ciarification across the document where "CIO" is 
referenced 

2) Section 2.1 - Commodity IT Services 

• Each service needs to be defined overall, needs to have detailed service metrics, how 
each metric is measured and how each metric is reported. I.e., need specify the 
Availability of <what> and then it needs to be reported and tracked. 

• This table looks more like a service catalog - which is where this information (and more) 
should be. 

3) Section 2.1 - Access Management 

How can access management only be "Normal business hours" when you are looking at 99% 
uptime for email, desktop computing, etc. Are they saying that issues with access don't count 
during outages? This makes no sense. What happens in an emergency? 

4) Section 2.1 - "Availability" Column 

• Will an independent IV&V be done with a report out to determine if the SLA are being 
met? 

• Are there monitoring systems and tools in place to determine if SLAs are being met? 

• Missing key elements like the formulas used to calculate SLAs, etc. 

• Who determines what LOC's SLA baselines should be? For example, 99% availability. 
What is this based on: LOC's current capacity or the needs of the SUs? 

• As to the 99%, does this factor in normal maintenance windows (as specified later in 
section 3.0)? If so, those should be specified in the table. Also, 99% translates to 3.65 
days a year -or almost 88 hours over the course of a year. If you factor in the planned 
outages 36 hours per month*12 months), you have closer to 21 or 22 days year- which 
is more like 94%. Not so great. Even factoring out the maintenance windows, 99% is 
still a little low in my opinion. It should be more like 3 or 4 nines (S nines is the golden 
standard) 

• Is it an outage if the access to the email is down, but the email servers are up? What 
does 99% mean for the wireless access? Is that uptime or coverage? 

• Will a dashboard be provided to the SU heads on a regular basis that details the data 
supporting the whether the SLAs are obtained? 

5) Section 2.1 - “Availability" Column, "Normal Business Hours" 

What is "Normal Business Hours" defined as? 

6) Priority Matrix 

• "...from a Fulfilment Group or incident management team." - Where are these defined? 

• How were these priorities defined? We need to discuss the urgency or the priority 
classifications. 
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• We need to discuss who is involved in the VIP category 

7) Section 3.0, third buiiet regarding suspension of maintenance activities 

• We can certainly agree to minimize activities during these times, but it is impossible and 
not feasible to totally stop work or plan around what amounts to an unpublished series 
of extended business services support outages throughout the year. 

8) Section 4 

• This doesn't touch on anything related to requesting or acquiring said business services 
and/or technical services and/or resources. It only appears to address incident response 
- but only in a general sense. 

• What are appropriate notification procedures? They aren't referenced or documented 
anywhere. 

• How will the service desk determine priority? 

9) Section 4.1 

Add the following bullets; 

• Maintain and keep current all offered services; 

• Provide proper communication and notice of changes in services; 

• Monitor and track all SLAs and report out results. 

10) Section 4.2 

Add the following bullets: 

• Notify the CIO Office of SU business changes that impact the relevance of SLAs. 

11) Appendix A - Normal Business Hours 

What about holidays? I would suggest referring to the LOG standard LCR on business hours 
instead of defining something separate here. 

12) Appendix A - PI 

Who gets to define what PI - P6 should be? I would think these initial baselines would be 
established by a committee of representatives from each SU. 

13) Appendix B - Service Catalogue Attached 

I assume that there will be a process for accounting for new technology In this table. 

14) Appendix B - Classification 

This should be a list of metrics. Not sure what "Classification" is supposed to mean.\ 

15) Appendix C 

Need business owner specified 
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2.2 Workstation Services 

2.2.1 Windows 7, Apple OS 

The Windows 7 Enterprise platforms, and the Apple platform, are offerings 
for desktop/laptop service, office automation, access to local and wide area 
networks, business applications, and access to the Internet. Full Local Area 
Network and Internet Access integration, including connectivity to email are 
included in this service offering. 

Additional services included in Workstation Services are as follows; 

• Provision of Full Local Area Network and Internet Access 
integration, including connectivity to email. 

• Provision of Secure Virtual Private Network (VPN) support 
with full network access. 

• Management of accounts. 

• Storage, backup and archive of network files. 

• Provision of Full Service platform support, including those 
platforms used in Telework such as Citrix service. 

• Deployment of workstations and peripherals for use with 
Windows 7. 

• Deployment of Workstation Peripheral Devices and Standard 
Move Support. 

• Preparation of training room/conference room facilities. 

• Provision of the Microsoft Office software suite. Deployment 
of other certified software is accomplished via automated 
methods or by delivery to the hosted distribution portal. 

• Management of custom client software licensing and legacy 
software support. 

• Test and deployment the most recent Original Equipment 
Manufacturer (OEM) released patches and updates for 
applications. Certification of hardware and software for use 
on the network. 

• Change Release and Configuration Management Services for 
customer needs for all Windows Services platforms. 

• Coordination and support of platforms related to full disaster 
recovery, and Continuity of Operations Planning (COOP). 

• Maintain Security Compliance with current patches and 
upgrades. 
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• Virtural Desktop option included with the Workstation Service 
- allocated to customers based on workstation count. 

2.2.2 File Retention/Backup Rotation 

CommVault is the emerging solution for end-user server and field office data 
protection tool operated by ITS in support of end-user infrastructure. 
CommVault will phase out existing tape backups as older servers are 
phased out and new infrastructure is deployed. This tool performs over the 
wire remote backups, compression and deduplication for server based data. 
The standard protection model supports up to 6 months of remote site 
backups with both large scale and file level recovery available. The default 
data file backup schedule and recovery objectives for authorized files is as 
follows for sites using the CommVault solution: 


.. File Retention/Backup Rotalion 

Location 

Backup 

Frequency 

Primary Site 
Retention 

Alternate Site Retention 

Field Office Server 

(using Commvault) 

Synthetic Full 

Weekly 

Up to three weeks 

Primary Offsite - Six 
months 

Secondary Offsite - Six 
months 

Field Office Server 

(using Commvault) 

Incrementals 

Dally 

Up to three weeks 

Primary Offsite - Six 
months 

Secondary Offsite - Six 
months 

Field Office Server 

(using tapes) 

Full 

Weekly 

Six weeks 

Six weeks 

Field Office Server 

(using tapes) 

Incrementals 

Daily 

one week 

none 

Enterprise Data 
Center 

Synthetic Full 

Weekly 

Six months 

Primary Offsite - Six 
months 

Enterprise Data 
Center 

Incremental 

Dally 

Six months 

Primary Offsite - Six 
months 


The actual restore time is dependent on the final size of the recovered data and 
whether an over the wire recovery is practical or if drives must be restored remotely 
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and shipped to the customer site. A significant disaster recovery effort may require 
an estimated recovery time to align with these limitations. 

2.2.3 Workstation Services Performance Measures 

Base service levels are shown in the table below. Additionally, the following above 
base service level options are available: 

Premier Services - A higher level of support service is available in the <city> and 
<city> large offices, Washington D.C. complex to meet the needs of executives or 
other priority customers. 

Elevated Privileges - Workstation configurations with advanced access rights and 
administrative privileges are available with supervisory and agency purchasing 
contact permission. 

Apple Workstation Service - ITS provides basic imaging of Apple Macintosh 
hardware and operating systems. 
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Base SLA 
(includes 
Elevated 
Privileges and 
Apple) 

Performance 
Targets for 
Base SLA 

Premier 
Service SLA 

Wide Area Network 
Availability (See 
Network Services for 
details) 

Availability of logical 
circuits between UTN 
node pairs (measured 
by Solar Winds) 

99.5% 

Same as Base 

Internet Access 
(measured at 

USDA gateways) 

(See Network 
Services for details) 

Availability of ENS + 
Internet Gateways 
(UTN) internet access 
for connected 
offices/end users, 
(measured by vendor 
reporting) 

99.9% 

Same as Base 

New Accounts in 1 
business day 

Approved “Effective 

Date” on the SAAR form 
to closure of request 
Transactions complete s 

1 business days 
(measured by Remedy) 

95% 

Same as Base 

Separated End 

Users - Disable 
Accounts 

Approved “Effective 

Date” on the SAAR form 
to closure of request 
Transactions complete s 

1 business days and will 
remain as a Disabled 
Account for 14 business 
days (measured by 
Remedy) 

95% 

24 Hours 
(disable), 100%, 
of the time 

Separated End 

Users - Delete 
Accounts 

Approved “Effective 

Date" on the SAAR form 
to closure of request 
Transactions complete s 
15 and < 20 business 
days or as requested on 
the SAAR Form 
(measured by Remedy) 

95% 

24 Hours 
(disable), 100%, 
of the time 

Update End User 
Account 

Completion of request 
after ITS is provided all 
required information. 
Transactions complete s 

3 business days 
(measured by Remedy) 

95% 

Same as Base 
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Mean Time to 
Resolve Hardware 
and Software 
Incidente 

Hardware Repairs 
resolved within 5 days 
from time of notification 
to OCIO/ITS (measured 
by Remedy) 

70% 

24 hours, 80% 
of the time 

Hardware System 
Deployment 

45 business days from 
notification to ITS or as 
separately agreed 
(measured by internal 
tracking) (Not applicable 
to large purchases) 

95% 

24 Hours, 80% 
of time 

(Deployment of 
goverment 
purchased iPads 
is supported by 
an “on-hand” 
pool of wireless 
iPads. iPads can 
be activated 
within 24 hours.) 

Software 
Certification and 
Release 

Certification and/or 
Approval of End User 
requests within 60 
Business days. 

90% 

Same as Base 

Client 

Supplemental 

Above Base 

Software 

Deployment 

Deployment Date S 45 
business days from 
notification to OCIO/ITS 
or as separately agreed 
to between the customer 
and OCIO/ITS in writing 
(measured by OCIO/ITS 
Remedy) 

90% 

24 Hours, 80% 
of time - 
Premier rate 

Toll-Free 
National/Support 
Help Desk- 
((Number of 
contacts/incidents in 
a month (1) properly 
resolved on the First 
Contact plus (2) 
contacts/incidents 
correctly routed 
according to the 
Routing Procedure) / 
total contacts in the 
month) 

Report from Contractor's 
or Governments system. 
The Government or a 
designated third party 
may audit the data. 

95% 

Averaged 

Monthly 

Same as Base 
SLA 
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Toll-Free 

Report from Contractor’s 

45 Seconds 

Same as Base 

National/Support 
Help Desk-Speed 
to Answer 

Measured time 
between a caller 
making his/her final 
selection in the IVR 
and speaking to a 
support agent. 

or Governments system. 

Averaged 

Monthly 

SLA 
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2.4 Mobility Devices 

2.4.1 Mobility Tablets 

Distinct from the "tablets" that are similar to laptops, "mobility tablets" are 
smaller, less functional than a full PC, but enhanced beyond the capabilities 
of a SmartPhone. They occupy a middle ground between phones and 
computers. These systems may utilize wireless and broadband connections 
and generally include services contracted with telecommunications carriers 
like a cell phone or smart phone, but have more user interaction and require 
more support than a phone. ITS support includes contract maintenance and 
oversight. 

2.4.2 Wireless Data Plans for Non-Voice Devices 

Support service can involve any effort to acquire, administer, support or 
deactivate mobile devices. This includes broadband and mobility tablets. 
Examples of support services would be ordering, receiving, activating and 
configuring devices, resolving operational problems, ordering replacement 
devices, applying operating system updates, maintaining associated 
inventory, ordering additional features, or requesting call detail records. 
Wireless devices offered are available to end user clients after authorization 
from designated customer group approvers. 

Transmission service for wireless devices such as smartphones, is provided 
via the commercial wireless vendor that best serves in the customer’s 
geography. Wireless accounts are maintained and administration is 
provided by ITS for the customer organization. 

Email service for Smartphones is provided by ITS via systems whereby 
Outlook/Exchange Accounts are linked via a secure connection. This 
provides compact, mobile email service to customers, as well as voice and 
other features that a specific device may offer (Note: Some features may be 
restricted based on security or other concerns). 
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2.4.3 Mobility Devices Measures 


Mobility Itewicm Services 

Service 

Type 

Service Measure 

Measurement 

Performance 

Target 

Mobility 

Tablets 

Deployment Plan 
- Base Offering 

Deployment Date s 5 business days 
from vendor activation date or as 
separately agreed to between the 
customer and ITS in writing. 

(measured by Remedy) 

95% 

Mobility 

Tablets 

Deployment Plan 
- Premier Offering 
fPremier Service 
defined here! 

Deployment of goverment purchased 
iPads is supported by an “on-hand” 
pool of wireless iPads, iPads can be 
activated within 24 hours 

80% 

Wireless 

Device 

Service 

Disconnect Time 

ITS issues order to disconnect service 
s 5 business days from notification to 
ITS or as separately agreed to 
between the customer and ITS in 
writing. Vendor disconnect time may 
take up to 60 days, (measured by 
Remedy) 

95% 


Formula 

Availability will be sourced from ITS tracking system 

Measurement 

Interval 

Measure Daily, Report Monthly 

Measurement Tool 

deployment plan, and Remedy 
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Network 

Service Description 

Local Area Network (LAN) 

We provide Locai Area Network (LAN) infrastructure which delivers 
secure, high-speed data transfer among iT resources and systems within 
all individual LANs within HCHB. 

Wide Area Network (WAN) 

We provide Wide Area Network (WAN) infrastructure which connects 
individual internal and external LANs. This infrastructure delivers 
secure, high-speed, Internet Protocol (IP) data transfer among them 
and the internet. 

Service Specifications 

Service Features 

Locai Area Network 

• 10/100 Mbps connectivity. 

• Power over Ethernet (PoE). 

• High Avaifability (HA) and High Performance (HP). 

• Reliable LAN connectivity with wired Ethern^. 

• Internet Protocol (IP) communication among local devices. 

• Compliant with FISMA standards. 

• Fully int^rated with OCIO IT security services. 

Wide Area Network 

• High-speed internet access {Ethernet, ATM Link, Frame Relay Link, 
and Broadband). 

• Throughput (64 Kbps to 1 Gbps). 

• Core WAN and Headend. 

• Customer Premises Equipment (CPE) -Optional 

• High Availability (HA) - Optional 

• Traffic prioritization through WAN Quality of Service (OoS) design - 
Optional 

• Enterprise Services Aaess Point (ESAP) - Optional 

• Reliable WAN connectivity with wired Ethernet. 

• Internet Protocol (IP) communication among local devices. 

• Fully integrated with Genera! Services Administration's Managed 
Trusted Internet Protocol Services (MTIPS) and OCiO IT security 
services. 

• Compliant with FISMA standards and the Federal Government 
Trusted internet Connertion (TiC) initiative. 

Service implementation 

Local Area Network 

• Perform LAN administration, including servicing Move, Add, and 
Change (MAC) requests. 

• Perform fault management, network configuration management, 
network monitoring and utilization, availability and capacity 
management, and archival. 

• Own and manage the entire network infrastructure life cycle, 
including servers and licenses. 

• Manage the physical wiring between end devices and network 
equipment only on HCHBNet network. 

• Apply updates, releases, patches, and fixes as appropriate or as 
recommended by OCIO management and vendors. 

Wide Area Network 

• Perform fault management, network configuration management, 
network monitoring and utilization, availability and capacity 
management, and archival. 


• Perform WAN administration, including servicing Move, Add, 
and Change (MAC) requests. 

• Perform remote site WAN management. 

• Own and manage the entire network infrastructure life cycle, 
including servers and licenses. 

• /^Jply updates, releases, patches, and fixes as appropriate or as 
recommended by OCIO management and vendors. 

Technical Support 

• Perform network assessment and design consuitation based on 
your business and technical needs. 

• Provide Continuity of Operations (COOP) support by rerouting 
the network traffic to the alternate site. Provide technical and 
troubleshooting support. 


Contact us 



Service Availability 

This service is available: <!nsert Service Hours> 


Service Levels 

Service Performance Metrics 


Service 

Type 

Service 

Measure 

Measurement 

Performance 

Taiget 

LAN 

Avaiiability 

LAN Availability s 
[Total Time -{Total 
Outage) / Total 

Time 

99% 



Router +Switch 
availability will be 
measured by 
SolarWinds 


WAN 

Connectivity 

Availability 
of logical 
circuits 
between 
UTN node 
pairs 

Rolling average 
over the previous 

12 months as 
reported by the 
network 
monitoring tool 
SolarWinds. 

99,5% 


How We Charge 


Service Benefits 

• This service is compliant with FISMA standards. 

• You get a reliable WAN connectivity with wired Ethernet. 

• We own the entire network infrastructure life cycle. 

• Our network assessment and WAN design are based on your 
business and technical needs. 

Customers 
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1 Help Desk 
Service Description 

Our customer service center as the single point of contact for ali your IT 
service needs. Our agents track and route service requests and incident 
reports throughout the requests' and reports' life cycies. 

Contact us to: 

• Request a new IT service or change an existing service. 

• Report an incident that disrupts your iT service. 

• Diagnose and resolve your specific technical problems. 

• Obtain general information on any of our IT Services. 

We serve ail of our customers by following the IT best practices and 
processes based on the Information Technology Infrastructure Ubrary 
(ITiL)V3 

Service Specifications 

Service Desk Support 

• Initiate a service ticket upon the receipt of an incident reporter 
service request, and assign it a priority according to Incident Metrics 
table shown on this page. 

• Log, track, manage, and resolve or escalate to the next level of 
support, ali incident reports and service requests. 

• Communicate to customers through online ticket updates, phone 
calls, and/or email notifications. The frequency of updates is based 
on the priority level of the ticket. 

• Close the service ticket only after the customer agrees with the 
resolution. 

VIP Support 

• Provide escalated or scheduled service on ail incident reports and 
service requests from VIP customers. 

Note: A VIP customer is identified as a user whose duties is time-sensitive 
and critical and requires escalated support. 

Information Dissemination 

• Notify customers about IT service outages and other iT-related 
information via emails, broadcast messages, and postings on the 
Intranet 

• Publish and maintain Technical Point of Contact (TPOC) information 
on the Intranet 

Special Projects 

Provide consulting and support on assessment, planning, and execution of 
special projects, e.g. upgrade of all computers in your organization. 

Service Availability 

7:30 AM to 6:00 PM, EST, Mon through Fri, except holidays. 


Contact us 


7:30 AM to 6:00 PM. EST. Mon through Fri, except holidays 

Telephone 


Email 


Building/Room 


Intranet 



Please contact us through one of these methods, depending on the 
nature of your service request or incident report: 

Phone Support 

Use tttis method to contact us for only these conditions; 

• Emergency infrastructure incident which has CRITICAL impact 
on you. 

• Failure of enterprise server, application, and/or single network, 
which has HIGH impact on you. 

• Urgent or critical ViP request. 

Voice Mail, Email, and Walk-In Support 

Use this method to contact us for these conditions: 

• Performance degradation (of a service) which does not have 
HIGH impact on you. 

• Service requests or general questions. 

After Hours On-Call Support 

if you need help outside business hours, please call us and leave a 
message with your name, phone number, and a brief description of 
the incident. When prompted, please press #1 and hang up - an on- 
cail agent will be paged to assist you. 

Note: We provide this support strictly for emergency infrastructure 
incidents that have CRITICAL impact on you. 

Service Levels 

Our agents assign a priority to a ticket per one of the 5 priority 
levels defined below. 

Priority levels 


Severity 

Level 

Severity Definition 

Priority level 

Severity 

1 

Emergency infrastructure incident 
which has CRITICAL impact on the 
customer. 

Priority 1 (Highest) 

Severity 

2 

Failure of enterprise server, 
application, and/or single network, 
which has HIGH impact on the 
customer. 

Priority 2 
(Medium) 

Severity 

3 

Performance degradation (of a 
service) which does not have HIGH 
impact on the customer. 

PrioriLy3 (Low) 

Severity 

4 

Service requests, which are related to 
a desktop/server security need and 
have MINOR impact on the customer. 

Priority 4 (Lovrer) 

Severity 

5 

All other service requests and 
assigned projects which have LOW 
impact on the customer. 

Priority 5 (Lowest) 


Note: 

Prioiity 1 and Priority 2 apply to unplanned outages only. Therefore, 
our agents do not assign these priority levels to IT service requests. 
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Tid<et Initiation 


Means of 
Contact 

Target Time for 

Ticket Initiation 

Target Percentage of Tickets 
initiated on Time 

Telephone 

15 minutes or less 

90% 

Walk-In 

15 minutes or less 

90% 

Email 

2 hours or less 

95% 

Voice Mail 

2 hours or less 

95% 


The Incident Metrics table beiow shows the target service level goals as 
soon as an agent initiates a ticket. 


• Check our online Frequently Answered Questions (FAQ) page 
toget quick answers 

Customer Responsibilities 

• When requesting support to resolve a problem, provide at least 
your contact information and detailed description of the 
problem. 

rrcsc agents may ask you to allow them the remote access to 
your system to help diagnose and resolve your problem. 


Incident Metrics 


Priority 

Level 

Target Frequency 
of Status Update 

Target 

Resolution 

Time 

Target Percentage 
of Calls Resolved on 
Time 

Priority 1 

1 hour 

4 hours or less 

95% 

Priority 2 

2 hours 

1 business day 
or less 

90% 

Priority 3 

1 business day 

3 business 
days or less 

85% 

Priority 4 

As agreed to with 
customer 

3 business 
days or less 

85% 

Priority 5 

As agreed to with 
customer 

5 business 
days or less 

85% 


Customers 


Customer Service Goals 

• Provide friendly, courteous, and efficient service. 

• Escalate promptly any inquiries or incident reports to appropriate 
ITCSC agents. 

• Provide escalated or scheduled service to VIP customers. 

• Communicate effectively the information on changes and outages to 
normal IT services. 

• Assess and understand evolving needs for new and existing services 
among users of IT services. 

• Determine the level of user satisfaction with IT services via surveys 
and other means of outreach, and to publicize the findings and 
actions taken in response. 

How We Charge 

Costs are distributed among the Office and Departmental Management 

accounts on the basis of their share of FTE. 

Service Benefits 

• You don't need to navigate the OCIO organizational structure to get 
IT service support, 

• You get a consistent IT service support and delivery. 

• We have access to a database of incident trends and root -cause 
analyses, which help us to serve you better. 

• Our help desk is designed to help you efficiently and effectively and 
to Improve the resolution time. 

Time and Cost Saving Tips 

• When contacting us, please provide as much information aboutyour 
incident report or service request as possible. This will help our 
agents to serve you better and quicker. 
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Yu, KanKan 

From: Baiakrishnan, Bhaskaran 

Sent: Friday, July 24, 2015 1:34 PM 

To: Yu, KanKan 

Subject: RE; Collective CTO Comments to SLA Document 


Very thorough job ... most impressive. Perhaps OCIO ought to consider entering into an MOD with COP for the purposes 
of getting the SLA document written to industry specs!!!! 


Have a great weekend. 


5 

Bhaskaran Balakrishnan 

Chief, R&D. Congressionai Research Service Group 
OCtO 

Library of Congress 


From: Yu, KanKan 

Sent: Friday, July 24, 2015 11:07 

To: Daye, Stacian C.; Farraj-Feijoo, Ricardo; Scheffler, Elizabeth; Conklin, Judith; Banks, Al; Bucknor, Vanley; Hoppis, 
Billy; Balakrishnan, Bhaskaran; Wilson, Tiria 
Cc; Nelson, Carrie A. 

Subject: Collective CTO Comments to SLA Document 

All, 

Per our discussion last Monday, attached are CTO's collective comments in the following DOCX attachment, in addition 
to the comments, we have also provided some sample content that we would like to be considered to be included in the 
baseline SLA document. These include: 

• Clear service definition that includes a description and outline of services 

• Excluded services, if any 

• Points of contact if the business would like to request a service 

• Performance Metrics and other KPIs 

• Reporting 

• Affected Customers 

Please let us know if you have any questions regarding the documents attached to this e-maii. 

Thanks, 

KanKan 

Enclosure: 

• CTO Collective Comments on Draft SLA Doc.docx - Collective Comments from CTO 

• SLA Sample.docx - Provides good examples on how metrics are reported and calculated 

• Sample SLA l.docx and Sample SLA Z.docx - Provide great service descriptions, contacts, and other information 


1 


282 


From; 

Sent; 

To; 

Subject: 

Attachments; 


Elmore, Nigel 

Tuesday, August 25, 2015 11:26 AM 
Ament, Douglas 

FW: Collective CTO Comments to SLA Document 

CTO Collective Comments on DRAFT SLA Doc.docx; SLA Sample.docx; Sample SLA 
I docx; Sample SLA 2.docx 


Yes. He sent them to Liz, who sent them to me. Should have been the other way around, but no biggy. 

Cheers, 

Nigel 

7^0059 

From: Scheffler, Elizabeth 
Sent; Friday, July 24, 2015 3:24 PM 
To: Elmore, Nigel 

Subject: FW: Collective CTO Comments to SLA Document 


From: Yu, KanKan 

Sent: Friday, July 24, 2015 11:07 AM 

To: Daye, Stacian C.; Farraj-Feijoo, Ricardo; Scheffler, Elizabeth; Conklin, Judith; Banks, Al; Bucknor, Vanley; Hoppis, 
Billy; Balakrishnan, Bhaskaran; Wilson, Tina 
Cc: Nelson, Carrie A. 

Subject: Collective CTO Comments to SLA Document 
All, 

Per our discussion last Monday, attached are CTO's collective comments in the following DOCX attachment. In addition 
to the comments, we have also provided some sample content that we would like to be considered to be included in the 
baseline SLA document. These include: 

• Clear service definition that includes a description and outline of services 

• Excluded services, if any 

• Points of contact if the business would like to request a service 

• Performance Metrics and other KPts 

• Reporting 

• Affected Customers 

Please let us know if you have any questions regarding the documents attached to this e-mail. 

Thanks, 

KanKan 

Enclosure: 

• CTO Collective Comments on Draft SLA Doc.docx - Collective Comments from CTO 

• SLA Sample.docx - Provides good examples on how metrics are reported and calculated 

• Sample SLA l.docx and Sample SLA Z.docx - Provide great service descriptions, contacts, and other information 

1 
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CTO Collective Comments on DRAFT "Service Level ^reement (SLA) between the United States 
Copyright Office (COP) and The Chief Information Officer (CIO)" 

General Comments: 

1) Services are not clearly defined in document. While the document contains good information, it 
is not cogent and organized for the Business to understand what common IT services are 
provided across the enterprise. As the business utilizing shared IT services, we should be looking 
at menu of services where we can pick and choose what we would like to leverage today and 
possibly in the future. The "How that service is provided" should also be provided within the 
document - a "recipe” per se. 

Analogy : We use the restaurant analogy. When you go to the restaurant, you see a menu - in 
this case, a service catalog - that informs you on what can be ordered, what you can expect to 
be on your plate, when it is going to be served (appetizer, entree, post-meal dessert, etc). Once 
you place your order, the chef puts the meal together using recipes that lists ingredients, 
amounts to use, cook times etc. 

For service catalogs (business and technical), the service needs to be defined overall, then 
detailed metrics need to be defined, targets for those metrics, how the metrics will be measured, 
and how metrics will be reported. For example, the document says "99% availability" but does 
not specify availability of what. 

CTO would like to see other information as well: 

a. Clear service definition that includes a description and outline of services 

b. Excluded services, if any 

c. Points of contact if the Business would like to request a service 

d. Performance Metrics and other KPIs 

e. Affected Customers 

f. Service Charges (if applicable) 

2) In the draft Directive, it states that the baseline of services paid for by ITS will be whatever they 
provided in January 2015. Two big problems with this: 1. It will take quite a while to document 
what they are already providing at a detailed level, and 2) it doesn't seem fair to start charging 
for additional services now when SUs can't build that funding into their budgets until FY17 at the 
earliest (maybe FY18?). 

3) Does ITS currently have the tools and processes in place to make this happen efficiently and 
report out successes and failures in meeting SLAs? If not, CTO does not see how much value this 
will bring in the short term until a "to-be" state is established. 


Detailed Comments 
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1 ) Section 1.1 - "Overview of the CIO" 

Should this be the OCIO? Please make this clarification across the document where "CIO" is 
referenced 

2 ) Section 2.1 — Commodity IT Services 

• Each service needs to be defined overall, needs to have detailed service metrics, how 
each metric is measured and how each metric is reported. I.e., need specify the 
Availability of <what> and then it needs to be reported and tracked. 

• This table looks more like a service catalog - which is where this information (and more) 
should be. 

3) Section 2.1 - Access Management 

How can access management only be "Normal business hours" when you are looking at 99% 
uptime for email, desktop computing, etc. Are they saying that issues with access don't count 
during outages? This makes no sense. What happens in an emergency? 

4) Section 2.1 - "Availability" Column 

• Will an independent IV&V be done with a report out to determine if the SLA are being 
met? 

• Are there monitoring systems and tools in place to determine if SLAs are being met? 

• Missing key elements like the formulas used to calculate SLAs, etc. 

• Who determines what LOC's SLA baselines should be? For example, 99% availability. 
What is this based on : LOC’s current capacity or the needs of the SUs? 

• As to the 99%, does this factor in normal maintenance windows (as specified later in 
section 3.0)? If so, those should be specified in the table. Also, 99% translates to 3.65 
days a year - or almost 88 hours over the course of a year. If you factor in the planned 
outages 36 hours per month*12 months), you have closer to 21 or 22 days year - which 
is more like 94%. Not so great. Even factoring out the maintenance windows, 99% is 
still a little low in my opinion. It should be more like 3 or 4 nines (5 nines is the golden 
standard) 

• Is it an outage if the access to the email is down, but the email servers are up? What 
does 99% mean for the wireless access? Is that uptime or coverage? 

• Will a dashboard be provided to the SU heads on a regular basis that details the data 
supporting the whether the SLAs are obtained? 

5) Section 2.1 - "Availability" Column, "Normal Business Hours" 

What is "Normal Business Hours" defined as? 

6) Priority Matrix 

• "...from a Fulfilment Group or incident management team," - Where are these defined? 

• How were these priorities defined? We need to discuss the urgency or the priority 
classifications. 
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• We need to discuss who is involved in the VIP category 

7) Section 3.0, third bullet regarding suspension of maintenance activities 

• We can certainly agree to minimize activities during these times, but it is impossible and 
not feasible to totally stop work or plan around what amounts to an unpublished series 
of extended business services support outages throughout the year. 

8) Section 4 

• This doesn't touch on anything related to requesting or acquiring said business services 
and/or technical services and/or resources. It only appears to address incident response 
- but only in a general sense. 

• What are appropriate notification procedures? They aren't referenced or documented 
anywhere. 

• How will the service desk determine priority? 

9) Section 4.1 

Add the following bullets: 

• Maintain and keep current all offered services; 

• Provide proper communication and notice of changes in services; 

• Monitor and track all SLAs and report out results. 

10) Section 4.2 

Add the following bullets: 

• Notify the CIO Office of SU business changes that impact the relevance of SLAs. 

11) Appendix A - Normal Business Hours 

What about holidays? I would suggest referring to the LOG standard tCR on business hours 
instead of defining something separate here. 

12) Appendix A -PI 

Who gets to define what PI - P6 should be? I would think these initial baselines would be 
established by a committee of representatives from each SU. 

13) Appendix B - Service Catalogue Attached 

I assume that there will be a process for accounting for new technology in this table. 

14) Appendix B - Classification 

This should be a list of metrics. Not sure what "Classification" is supposed to mean.\ 

15) Appendix C 

Need business owner specified 
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2.2 Workstation Services 
2.2.1 Windows 7, Apple OS 

The Windows 7 Enterprise platforms, and the Apple platform, are offerings 
for desktop/laptop service, office automation, access to local and wide area 
networks, business applications, and access to the Internet. Full Local Area 
Network and Internet Access integration, including connectivity to email are 
included in this service offering. 

Additional services included in Workstation Services are as follows: 

• Provision of Full Local Area Network and Internet Access 
integration, including connectivity to email. 

• Provision of Secure Virtual Private Network (VPN) support 
with full network access. 

• Management of accounts. 

• Storage, backup and archive of network files. 

• Provision of Full Service platform support, including those 
platforms used in Telework such as Citrix service. 

• Deployment of workstations and peripherals for use with 
Windows 7. 

• Deployment of Workstation Peripheral Devices and Standard 
Move Support. 

• Preparation of training room/conference room facilities. 

• Provision of the Microsoft Office software suite. Deployment 
of other certified software is accomplished via automated 
methods or by delivery to the hosted distribution portal. 

• Management of custom client software licensing and legacy 
software support. 

• Test and deployment the most recent Original Equipment 
Manufacturer (OEM) released patches and updates for 
applications. Certification of hardware and software for use 
on the network. 

• Change Release and Configuration Management Services for 
customer needs for all Windows Services platforms. 

• Coordination and support of platforms related to full disaster 
recovery, and Continuity of Operations Planning (COOP). 

• Maintain Security Compliance with current patches and 
upgrades. 
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• Virtural Desktop option included with the Workstation Service 
- allocated to customers based on workstation count, 

2.2.2 File Retention/Backup Rotation 

CommVault is the emerging solution for end-user server and field office data 
protection tool operated by ITS in support of end-user infrastructure. 
CommVault will phase out existing tape backups as older servers are 
phased out and new infrastructure is deployed. This tool performs over the 
wire remote backups, compression and deduplication for server based data. 
The standard protection model supports up to 6 months of remote site 
backups with both large scale and file level recovery available. The default 
data file backup schedule and recovery objectives for authorized files is as 
for sites using the CommVault solution: 


Tiir Rpttn' on B.II f'lp Rri 1* n 



Location 


Frequency 

Primary Site 
Retention 

Alternate Site Retention 

Field Office Server 

Synthetic Full 

Weekly 

Up to three weeks 

Primary Offsite - Six 
months 

(using Commvault) 




Secondary Offsite - Six 
months 

Field Office Server 

Incrementals 

. Daily..-'."'::. 

Up to three. weeks 

Primary Offsite - Six 
months 

(using Commvault) 

...... 



: 'Secondary Offsite - Six 
months 

Field Office Server 

Full 

Weekly 

Six weeks 

Six weeks 

(using tapes) 





Field Office Server 

Incrementals 

Daily 

" 'tone week 

none 

(using tapes) 





Enterprise Data 
Center 

Synthetic Full 

Weekly 

Six months 

Primary Offsite ™ Six 
months 

Enterprise Data 
Center 

IB! 

Daily : 

Six months 

Primary Offsite - Six 
months 


The actual restore time is dependent on the firial size of the recovered data and 
whether an over the wire recovery is practical or if drives must be restored remotely 


Page 2 
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and shipped to the customer site. A significant disaster recovery effort may require 
an estimated recovery time to align with these limitations. 

2.2.3 Workstation Services Performance Measures 

Base service levels are shown in the table below. Additionally, the following above 
base service level options are available: 

Premier Services - A higher level of support service is available in the <city> and 
<city> large offices, Washington D.C. complex to meet the needs of executives or 
other priority customers. 

Elevated Privileges - Workstation configurations with advanced access rights and 
administrative privileges are available with supervisory and agency purchasing 
contact permission. 

Apple Workstation Service - ITS provides basic imaging of Apple Macintosh 
hardware and operating systems. 
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Vv-'k' Area Nof^ork 

Availability {See 
Network Services for 
details) 

Availability of logical 
circuits between UTN 
node pairs (measured 
by Solar Winds) 

99 


Internet Access 
(measured at 

USDA gateways) 
(See Network 
Services for details) 

Availability of ENS + 
Internet Gateways 
(UTN) internet access 
for connected 
offices/end users, 
(measured by vendor ■ 
reporting) 

99.9% 

Same as Base 

New Accounts in 1 
business day 

Approved “Effective 

Date" on the SAAR form 
to closure of request 
Transactions complete < 

1 business days 
(measured by Remedy) 

95% 

Same as Base 

Separated End 

Users - Disable 
Accounts 

Approved “Effective 

Date” on the SAAR form 
to closure of request 
Transactions complete s 

1 business days and will 
remain as a Disabled 
Account for 14 business 
days (measured by 
Remedy) 

95% 

24 Hours 
(disable). 100%, 
of the time 

Separated End 

Users - Delete 
Accounts 

Approved “Effective 

Date” on the SAAR form 
to closure of request 
Transactions complete a 
15 and S 20 business 
days or as requested on 
the SAAR Form 
(measured by Remedy) 

95% . 

24 Hours 
(disable), 100%, 
of the time 

Update End User 
Account 

Completion of request 
after ITS is provided all 
required information. ' 
Transactions complete < 
3 business days 
(measured by Remedy) 

95% 

Same as Base 


Page 4 
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Mean Time to 
Resolve Hardware 
and Software 
Incidents 

Hardware Repairs 
resolved within 5 days 
from time of notification 
to OCIO/ITS (measured 
by Remedy) 

70% 

24 hours, 80% 
of the time 

Hardware System 
Deployment 

45 business days from 
notification to ITS or as 
separately agreed 
(measured by internal 
tracking) (Not applicable 
to large purchases) 

95% 

24 Hours, 80% 
of time 

(Deployment of 
goverment 
purchased iPads 
is supported by 
an “on-hand” 
pool of wireless 
iPads. iPads can 
be activated 
within 24 hours.) 

Software 
Certification and 
Release 

Certification and/or 
Approval of End User 
requests within 60 
Business days. 

90% 

Same as Base 

Client 

Supplemental 

Above Base 

Software 

Deployment 

Deployment Date s 45 
business days from 
notification to OCIO/ITS 
or as separately agreed 
to between the customer 
and OCIO/ITS in writing 
(measured by OCIO/ITS 
Remedy) 

90% 

24 Hours, 80% 
of time - 
Premier rate 

Toll-Free 
National/Support 
Help Desk- 

((Number of 
contacts/incidents in 
a month (1) properly 
resolved on the First 
Contact plus (2) 
contacts/incidents 
correctly routed 
according to the 
Routing Procedure) / 
total contacts in the 
month) 

Report from Contractor’s 
or Governments systerh. 
The Government or a 
designated third party 
may audit the data. 

95% 

Averaged 

Monthly 

Same as Base 
SLA 
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Toll-Free 

Report from Contractor’s 

45 Seconds 

Same as Base 

National/Support 
Help Desk-Speed 
to Answer 

Measured time 
between a caller 
making his/her final 
selection in the IVR 
and speaking to a 
support agent. 

or Governments system. 

Averaged 

Monthly 

SLA 
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2.4 Mobility Devices 

2.4.1 Mobility Tablets 

Distinct from the "tablets" that are similar to laptops, "mobility tablets" are 
smaller, less functional than a full PC, but enhanced beyond the capabilities 
of a Smartphone. They occupy a middle ground between phones and 
computers. These systems may utilize wireless and broadband connections 
and generally include services contracted with telecommunications carriers 
like a cell phone or smart phone, but have more user interaction and require 
more support than a phone. ITS support includes contract maintenance and 
oversight. 

2.4.2 Wireless Data Plans for Non-Voice Devices 

Support service can involve any effort to acquire, administer, support or 
deactivate mobile devices. This includes broadband and mobility tablets. 
Examples of support services would be ordering, receiving, activating and 
configuring devices, resolving operational problems, ordering replacement 
devices, applying operating system updates, maintaining associated 
inventory, ordering additional features, or requesting call detail records. 
Wireless devices offered are available to end user clients after authorization 
from designated customer group approvers. 

Transmission service for wireless devices such as smartphones, is provided 
via the commercial wireless vendor that best serves in the customer's 
geography. Wireless accounts are maintained and administration is 
provided by ITS for the customer organization. 

Email service for Smartphones is provided by ITS via systems whereby 
Outlook/Exchange Accounts are linked via a secure connection. This 
provides compact, mobile email service to customers, as well as voice and 
other features that a specific device may offer (Note: Some features may be 
restricted based on security or other concerns). 
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Mobility bevicesServi 


tvioDiiiiy 

Tablets 


Wireless 

Device 

Service 


uepioyment i^ian 
- Base Offering 


Deployment Plan 

- Premier Offering 
( Premier Service 
define d here) 

Disconnect Time 


Form ula 

Measurement 

Interval 


Deployment Date S 5 business days 95% 

from vendor activation date or as 
separately agreed to between the 
customer and ITS in writing, 

(measured by Remedy) 

Deployment of goverment purchased 80% 
iPads is supported by an “on-hand” 
pool of wireless iPads. iPads can be 
activated within 24 hours 

ITS issues order to disconnect service 95% 

s 5 business days from notification to 

ITS or as separately agreed to 

between the customer and ITS in 

writing. Vendor disconnect time may 

take up to 60 days, (measured by 

Remedy) 

Availability will be sourced from ITS tracking system 
Measure Dailyji Report Monthly 


Measurement Tool 1 deployment plan, and Remedy 
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Network 

Service Description 

Local Area Network (LAN) 

We provide Local Area Network (LAN) infrastructure which delivers 
secure, high-speed data transfer among IT resources and systems within 
all individual LANs within HCHB. 

Wide Area Network (WAN) 

We provide Wide Area Network (WAN) infrastructure which connects 
individual internal and external LANs. This infrastructure delivers 
secure, high-speed. Internet Protocol (IP) data transfer among them 
and the Internet 

Service Specifications 

Service Features 

Local Area Network 

• 10/100 Mbps connediivity. 

• Power over Ethernet (PoE). 

• High Availability (HA) and High Performance (HP). 

• Reliable LAN connectivity with wired Ethernet. 

• Internet Protocol (IP) communication among local devices. 

• Compliant with FISMA standards. 

• Fully Integrated with OCIO IT security services. 

Wide Area Network 

• High-speed Internet access (Ethernet, ATM Link, Frante Relay Link, 
and Broadband). 

• Throughput (64 Kbps to 1 Gbps). 

• Core WAN and Headend. 

• Customer Premises Equipment (CPE) - Optional 

• High Availability (HA) - Optional 

• Traffic prioritization through WAN Quality of Service (QoS) design - 
Optional 

• Enterprise Sen/ices Access Point (ESAP)- Optional 

• Reliable WAN connectivity with wired Ethernet. 

• Internet Protocol (IP) communication among local devices. 

• Fully Integrated with Genera! Services Administration's Managed 
Trusted internet Protocol Services (MTtPS) and OCIO IT security 
services. 

• Compliant with FISMA standards and the Federal Government 
Trusted Internet Connection (TIC) initiative. 

Service Implementation 

Local Area Network 

• Perform LAN administration, including servicing Move, Add, and 
Change (MAC) requests. 

• Perform fault management, network configuration management, 
network monitoring and utilization, availability and capacity 
management, and archival. 

• Own and manage the entire network infrastructure life cycle, 
including servers and licenses. 

• Manage the physical wiring between end devices and network 
equipment only on HCHBNet network. 

• Apply updates, releases, patches, and fixes as appropriate or as 
recommended by OCIO management and vendors. 

Wide Area Network 

• Perform fault management, network configuration management, 
network monitoring and utilization, availability and capacity 
management, and archival. 


• Perform WAN administration, including servicing Move, Add, 
and Change (MAC) requests. 

• Perform remote site WAN management. 

• Own and manage the entire network infrastructure life cycle, 
including servers and licenses. 

• Apply updates, releases, patches, and fixes as appropriate or as 
recommended by OCIO management and vendors. 

Technical Support 

• Perform network assessment and design consultation based on 
your business and technical needs. 

• Provide Continuity of Operations (COOP) support by rerouting 
tfie network traffic to the alternate site. Provide technical and 
troubleshooting support. 


Contact us 


<lnsert Operating Hours> 

Telephone 


Email 


Building/Room 


Intranet 



Service Availability 

This service is available: <insert Service Hours> 


Service Levels 


Service Performance Metrics 


Service 

Type 

Service 

Measure 

Measurement 

Performance 

Target 

UN 

Availability 

UN Availability s 
[Total Time -{Total 
Outage] / Total 

Time 

99% 



Router +Switch 
availability will be 
measured by 
SolarWInds 


WAN 

Connectivity 

Availability 
of logical 
circuits 
between 
UTN node 
pairs 

Rolling average 
over the previous 

12 months as 
reported by the 
network 
monitoring tool 
SotarWinds. 

99.5% 


How We Charge 


Service Benefits 

• This service is compliant with FiSMA standards. 

• You get a reliable WAN connectivity with wired Ethernet. 

• We own the entire network infrastructure life cycle. 

• Our network assessment and WAN design are based on your 
business and technical needs. 

Customers 
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1 Help Desk 

Service Description 

Our customer service center as the single point of contact for all your IT 
service needs. Our agents track and route service requests and incident 
reports throughout the requests' and reports' life cycles. 

Contact us to: 

• Request a new IT service or change an existing service. 

• Report an incident that disrupts your IT service. 

• Diagnose and resolve your specific technical problems. 

• Obtain general information on any of our IT Services. 

We serve all of our customers by following the IT best practices and 
processes based on the Information Technology Infrastmcture library 
(ITILJ V3 

Service Specifications 

Service Desk Support 

• Initiate a service ticket upon the receipt of an incident report or 
service request, and assign it a priority according to incident Metrics 
table shown on this page. 

• Log, track, manage, and resolve or escalate to the next level of 
support, all incident reports and service requests. 

• Communicate to customers through online ticket updates, phone 
calls, and/or email notifications. The frequency of updates is based 
on the priority level of the ticket. 

• Close the service ticket only after the customer agrees with the 
resolution, 

VIP Support 

• Provide escalated or scheduled service on ali incident reports and 
service requests from VIP customers. 

Note: A VIP customer is identified as a user whose duties is time-sensitive 
and critical and requires escalated support. 

Information Dissemination 

• Notify customers about IT service outages and other IT-related 
information via emails, broadcast messages, and postings on the 
Intranet 

• Publish and maintain Technical Point of Contact (TPOC) information 
on the intranet 

Special Projects 

Provide consulting and support on assessment, planning, and execution of 
special projects, e.g. upgrade of ail computers In your organization. 

Service Availability 

7:30 AM to 6:00 PM, EST, Mon through Fri, except holidays. 


Contact us 


7:30 AM to 6:00 PM. EST. Mon through Fri, except holidays 

Telephone 


Email 


Building/Room 


intranet 



Please contact us through one of these methods, depending on the 
nature of your service request or incident report: 

Phone Support 

Use this method to contact us for only these conditions: 

• Emergency infrastructure incident which has CRITICAL impact 
on you. 

• Failure of enterprise server, application, and/or single network, 
which has HIGH impact on you. 

• Urgent or critical VIP request. 

Voice Mail, Email, and Walk-In Support 

Use this method to contact us for these conditions: 

• Performance degradation (of a service} which does not have 
HIGH impact on you. 

• Service requests or general questions. 

After Hours On-Call Support 

If you need help outside business hours, please call us and leave a 
message with your name, phone number, and a brief description of 
the incident. When prompted, please press #1 and hang up - an on- 
call agent will be paged to assist you. 

Note: We provide this support strictly for emergency infrastructure 
incidents that have CRITICAL impact on you. 

Service Levels 

Our agents assign a priority to a ticket per one of the 5 priority 
levels defined below. 

Priority Levels 


Severity 

Level 

Severity Definition 

Priority Level 

Severity 

1 

Emergency infrastructure incident 
which has CRITICAL impact on the 
customer. 

Priority 1 (Highest) 

Severity 

2 

Failure of enterprise server, 
application, and/or single network, 
which has HIGH impact on the 
customer. 

Priority 2 
(Medium) 

Severity 

3 

Performance degradation (of a 
service) which does not have HIGH 
Impact on the customer. 

Priority 3 (Low) 

Severity 

4 

Service requests, which are related to 
a desktop/server security need and 
have MINOR impact on the customer. 

Priority 4 (Lower) 

Severity 

5 

AH other service requests and 
assigned projects which have LOW 
impact on the customer. 

Priority 5 (Lowest) 


Note: 

Priority 1 and Priority 2 appiy to unplanned outages only. Therefore, 
our agents do not assign these priority levels to IT service requests. 
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Ticket Initiation 


Means of 
Contact 

Target Time for 

Ticket Initiation 

Target Percentage of Tickets 
Initiated on Time 

Telephone 

15 minutes or less 

90% 

Walk-In 

15 minutes or less 

90% 

Email 

2 hours or less 

95% 

Voice Mail 

2 hours or less 

95% 


The Incident Metrics table below shows the target service level goals as 
soon as an agent initiates a ticket. 


Incident Metrics 


Priority 

level 

Target frequency 
of Status Update 

Target 

Resolution 

Time 

Target Percentage 
of Calls Resolved on 

Time 

Priority 1 

1 hour 

4 hours or less 

95% 

Priority 2 

2 hours 

1 business day 
or less 

90% 

Priority 3 

1 business day 

3 business 
days or less 

85% 

Priority 4 

As agreed to with 
customer 

3 business 
days or less 

85% 

Priority 5 

As agreed to with 
customer 

5 business 
days or less 

85% 


• Check our online Frequently Answered Questions (FAQj page 
to get quick answers 

Customer Responsibilities 

• When requesting support to resolve a problem, provide at least 
your contact information and detailed description of the 
problem. 

• ITCSC agents may ask you to allow them the remote access to 
your system to help diagnose and resolve your problem. 

Customers 


Customer Service Goals 

• Provide friendly, courteous, and efficient service. 

• Escalate promptly any inquiries or incident reports to appropriate 
ITCSC agents. 

• Provide escalated or scheduled service to VIP customers. 

• Communicate effectively the information on changes and outages to 
normal IT services. 

• Assess and understand evolving needs for new and existing services 
among users of IT services. 

• Determine the level of user satisfaction with IT services via surveys 
and other means of outreach, and to publicize the findings and 
actions taken In response. 

How We Charge 

Costs are distributed among the Office and Departmental Management 

accounts on the basis of their share of FTE, 

Service Benefits 

• You don't need to navigate the OCIO organizational structure to get 
IT service support. 

• You get a consistent IT service support and delivery. 

• We have access to a database of incident trends and root-cause 
analyses, which help us to serve you better. 

• Our help desk is designed to help you efficiently and effectively and 
to improve the resolution time. 

Time and Cost Saving Tips 

• When contacting us, please provide as much information about your 
incident report or service request as possible. This will help our 
agents to serve you better and quicker. 
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Ament, Douglas 

From: 

Najia, Dina 

Sent: 

Thursday, September 10, 2015 9:33 AM 

To: 

Farraj-Feijoo, Ricardo; Yu. KanKan; Daye, Stacian C, 

Cc: 

Ament, Douglas 

Subject: 

RE: CIO SLA Process Feedback (COP) 


Hi Ricardo and KanKan 

The meeting is still on. ! will let Staci respond regarding an update on the documentation. 
Thank you and see you later this morning. 

Please note that Judith has moved offices and Is now In LM 630. 


From: Farraj-Feijoo, Ricardo 
Sent: Thursday, September 10, 2015 9:03 AM 
To: Yu, KanKan; Najia, Dina; Daye, Stacian C. 
Cc: Ament, Douglas 

Subject: RE: CIO SLA Process Feedback (COP) 


Are we still meeting today? We have not received any feedback regarding our initial comments. 
Thanks, 

Ricardo 


From; Yu, KanKan 

Sent: Wednesday, September 09, 2015 12:25 PM 
To; Najia, Dina; Daye, Stacian C. 

Cc: Farraj-Feijoo, Ricardo; Ament, Douglas 
Subject: RE: CIO SLA Process Feedback (COP) 


Dina, Stacian: 

Are there any documents associated with this meeting other than the comment document and samples we sent in July? 

Thanks, 

KanKan 

— Original Appointment — 

From: Najia, Dina 

Sent: Thursday, September 03, 2015 8:52 AM 

To: Najia, Dina; Conklin, Judith; Banks, A!; Daye, Stadan C; Farraj-Feijoo, Ricardo; Yu, KanKan 
Cc: Ament, Douglas; David, Kimble A. 

Subject: CIO SLA Process Feedback (COP) 

When: Thursday, September 10, 2015 11:00 AM-11:30 AM (UTC-05:00) Eastern Time (US & Canada). 

Where; Judith's (New) Office LM 630 


1 
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COP Feedback to CIO on SLA Process 


2 
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Ament, Douglas 

From: 

Daye, Stacian C. 

Sent: 

Thursday, September 10, 2015 9:42 AM 

To: 

Farraj-Feijoo, Ricardo 

Cc: 

Ament, Douglas; Banks, Al; Conklin, Judith; Najia, Dina; Yu, KanKan 

Subject: 

RE: CIO SLA Process Feedback (COP) 


Good Morning Ricardo, 


VVe are stil! on schedule to meet today. Ail of your question.*; and comments will be reviewed and discussed 
during today's meeting. An updated SLA ciocument will also be distributed at the meeting. 


See you soon! 

‘Tfian^, 

Siaci 


LI BRA RY or 
CONGRtSS 


Stadan C ^aye 
Office if Strategic Jnitiatives/ 
Information TecdnoCogy Services 
‘Email: stla\e@lbc.fov 
Ehone: 202-707-9788 


From; Farraj*Feijoo, Ricardo 
Sent; Thursday, September 10, 2015 9:03 AM 
To: Yu, KanKan; Najia, Dina; Daye, Stacian C. 
Cc: Ament, Douglas 

Subject: RE: CIO SLA Process Feedback (COP) 


Are we still meeting today? We have not received any feedback regarding our initial comments. 
Thanks, 

Ricardo 


From: Yu, KanKan 

Sent: Wednesday, September 09, 2015 12:25 PM 
To: Najia, Dina; Daye, Stacian C. 

Cc: Farraj-Feijoo, Ricardo; Ament, Douglas 
Subject: RE: CIO SLA Process Feedback (COP) 


Dina, Stacian; 
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Are there any documents associated with this meeting other than the comment document and samples we sent in July? 

Thanks. 

KanKan 

Original Appointment — 

From; Najia, Dina 

Sent: Thursday, September 03, 2015 8:52 AM 

To: Najia, Dina; Conklin, Judith; Banks, Al; Daye, Stacian C.; Farraj-Feijoo, Ricardo; Yu, KanKan 
Cc; Ament, Douglas; David, Kimble A. 

Subject: CIO SLA Process Feedback (COP) 

When: Thursday, September 10, 2015 11:00 AM-11;30 AM (UTC-05:00) Eastern Time (US & Canada). 

Where: Judith's (New) Office LM 630 


COP Feedback to CIO on SLA Process 


2 
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Arnenl^^Dougl^ 

From: 

Sent: 

To: 

Cc: 

Subject: 


Daye, Stacian C. 

Thursday, September 10, 2015 6:57 PM 
Farraj-Feijoo. Ricardo; Yu, KanKan 
Ament, Douglas; Banks, Al; Conklin, Judith 
RE: CIO SLA Process Feedback (COP) 


All, 

Attached are the documents that we reviewed in this morning's meeting. 



DRAFT. 

C0P.Sen,'ice.Le,.. 



COP SLA 

Feedb3ck9-10-1.,, 

Staci 


LIBRARY OF 
CONORLSS 
Stadan C ^aye 
Office of Strategic Jmtiatives/ 
Information 'Tec/inoCogy Services 
‘EmoiC sdaye@Coc.gov 
(Pfione: 202-?07'9788 


From: Daye, Stacian C. 

Sent: Thursday, September 10, 2015 9:42 AM 
To: Farraj-Feijoo, Ricardo 

Cc: Ament, Douglas; Banks, Ai; Conklin, Judith; Najia, Dina; Yu, KanKan 
Subject: RE: CIO SLA Process Feedback (COP) 


Ciood Morning Ricardo, 

We are still on schedule to meet today. Ai! of your questions and comments will be reviewed and discussed 
during today's meeting. An updated SLA document will also be distributed at the meeting. 


See you soon! 


302 


Staci 

« OLE Object: Picture {Device Independent Bitmap) » 

Stacian C '^Daye 

Office of Strategic Initiatives/ 

Information ‘Tecfuuilogy Services 
‘‘EmaiC sdctye@lbc.aov 
Idiom: 202-707-9788 


From: Farraj-Feijoo, Ricardo 
Sent; Thursday, September 10, 2015 9:03 AM 
To: Yu, KanKan; Najia, Dina; Daye, Stacian C. 
Cc: Ament, Dougias 

Subject: RE: CIO SLA Process Feedback (COP) 


Are we still meeting today? We have not received any feedback regarding our initial comments, 
Thanks, 

Ricardo 


From: Yu, KanKan 

Sent: Wednesday, September 09, 2015 12:25 PM 
To: Najia, Dina; Daye, Stacian C. 

Cc: Farraj-Feijoo, Ricardo; Ament, Douglas 
Subject: RE: CIO SLA Process Feedback (COP) 


Dina, Stacian: 

Are there any documents associated with this meeting other than the comment document and samples we sent in July? 

Thanks, 

KanKan 

Original Appointment — 

From: Najia, Dina 

Sent; Thursday, September 03, 2015 8:52 AM 

To: Najia, Dina; Conklin, Judith; Banks, Al; Daye, Stacian C.; Farraj-Feijoo, Ricardo; Yu, KanKan 
Cc: Ament, Douglas; David, Kimble A. 

Subject: CIO SLA Process Feedback (COP) 

When: Thursday, September 10, 2015 11:00 AM-11:30 AM (UTC-05:00) Eastern Time (US & Canada). 

Where: Judith’s (New) Office LM 630 


COP Feedback to CIO on SLA Process 


2 
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Service Level Agr 

(SLA) 

BEm^LEN 

TFIE UNIIIED STATES COPYRIGHT OFFICE (COP) 

AND 

THE CHIEF information OFFICER (CIO) 

For the period October 1, 2015 - September 30, 2016 

DRAFT 


September 10, 2015 
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CIO 
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CIO 
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I II l\ ' >OLi 1 in\ 


J,1 0\ctview ot CIO 

The Chief Information Officer (CIO) ensures the effective delivery of information 
technology resources and services in support of the Library's mission, functions, and 
activities. The mission of CIO is to provide reliable and effective information systems 
anti telecommunications services to the Library in support of its efforts to sen-'e Congress 
and the nation, manage its collections, and plan, design, and implement systems which 
define the future digital library and information infrastructure. .. 

1.2 Scope OF Agreement 

This is a Service Level Agreement (SLA) between CIQand the Library of Congress (LOC) 
United States Copyright Office (COP) for the period October 1, 2015 through September 
30, 2016. The purpose of this SLA is to establisjjjbaselme support levels for commodity IT 
services that are provided by CIO to COP. . 

This SLA is binding upon CIO and COP. The CIO and COP may change this agreement 
when widespread service-affecting issues arisef.|':new technologies develop, or 
reciuirements change. Ail modifications must be agreed upon bv both the CIO and COP, 
CIO and COP agree to engage in good-fwth efforts to resolve any problems which may 
arise, 

As needed and appropriate Memoranda of Agreement (MOUs) will establish support 
levels for specializcdiCIO support not covered in this agreement. 

1.3 AssuMrnoNS . 

This agreement relies on certain op&ational assumptions. Should any of these 
assumptions change, then the CIO and COP will negotiate and agree upon any necessary 
adjustments to this agreement.^’ 

♦ Support levels established bytthis agreement will be provided. 

♦ All IT-related mandates, such as regulatory or Congressional, have been accounted 
for iii this SLA. 

1.4 Outside CIO's Control 

The services provided under this SLA may be temporarily suspended in part or in full by 
the CIO or other LOC or U.S. Government officials in the instance of unplanned, 
widespread, service-affecting issues. The sendees will be considered to be in "reduced 
service mode" in the instance of service-affecting issues which render the entire LOC 
enterprise unusable or severely degraded, these may include: 

♦ Certain Department of Homeland Security (DHS) alerts; 

♦ Severe weather or other natural occurrences like earthquakes, asteroid strikes, etc. 
which affects wide-area communication links, or utility services or prevents 
technicians from reaching their workplaces; 

♦ A Government shutdown, declared by the Office of Personnel Management; 
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♦ Certain security threats and attacks; and, 

# Scheduled life & safety' testing. 


Restoration of services covered under this SLA may be subject to factors outside of CIO's 
control. These may include vendor lead time (for purchases or vendor-provided repairs) 
and service provider lead time. 


Unless spec'tically slated otherwise, OCIO wll pay the cost of the commodity level 
sor\ ire otferings pending avaiiabilih' of funds. 

2.0 II Sriiviciis 


i he services listed here are standard, meaning that these services "are provided at no cost 
to COP. 


As noted by the Federal Information Technology Shared Services Strategy U and the 
Federal IT S hared Ser vi ces Implementation Guide? ; there are three general, eategories of 
shared services in the Federal Government: commodity H , support, and mission services, 
as described below: sv 

1. Commodity IT Services - As 'desraftwd-in OMB Memorandum M- ll-29d 
examples of commodity IT shared, service opportunities include: 

• IT iafrastructiii#ij:(e.g., data centers, netwotfes, workstations, and core 
softwfiait'e); and 

• Enterprise IT serviices (e.g., e-Mail, web infrastructure, collaboration tools, 
security, B|htityiag4:access management). Commodity IT is asset-oriented, 

, , while enterprise IT services may, at times, be more utility-oriented (defined 
, , as pu'f'eftasing % rate). 

2. Support Services - Are defined by the capabilities that supiport common business 
functions performed bysipeariy all Federal organizations. These include functional 
areas stich-as budgetin^ifinancial, human resources, asset, and property and 
acquisition management 

3. Mission Setvices - These are core purpose and functional capabilities of the Federal 
Government, such as disaster response, food safety, and national defense and 
employment sen ices Some Mission Services may have a single Federal organization 
focused on providing that service, while other mission services have multiple Federal 


oil i’ h liH'nifion Kdinoioiii Sluied Scnices Strateg;i, Office of Management and Budget (O.MB), Office of F. 

\ iiiTt. nj luKitm ilion 1 cchnolog}'. May 2, 2012 
' _ uh r; ]it dil. ml . t/fil es/omb/a ssets/egov docs/.shared semccs srmicfi.pdf 

^ ^ bhixed Sendees Implemenradon Guide, CIO Council, Apnl l3.2013 

' r* ^ '- 11 !'- ''C.uplo downloads/ 2 . 01.3 /04/CI QC-Federal-Slmred-ScnTces-!iT-ipiemeniarioTi Guide.pdf 
Buyjgg (OMB), M-n-29, Chjef Information Officer Authorities, August 8, 2011 
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organizations piroviding parts of a service. This may be due to statute, budget or other 
unique capabilities an agency may have developed. 

The scope of this SLA will cover Commodity IT Services. 
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3.0 S>si I Ki'-. M-\in n nance & Po licy 

The fol]o\L'ing events ma\' impact on service availability: 

^ Planned maintenance windows - CIO is required to update and maintain the 

technical infrastructure on a regular basis per Maintenance Policy dated July 1, 2013. 

The agreed change w-indows for this work are: 

♦ Maintenance activity that is expected to take less than 4 hours will take 
place on the first and third Tuesday of each mop,th:.begmning at 9;00pm 
Tuesday and ending by 3;00am on Wednesday ' 

♦ Maintenance activity tliat is expected toTake leSThan 12 hours to complete 
will take place on the second and fourth Sunday df:hqch month beginning at 
6:00am and ending by 6:00pm thesame day; 

«• Maintenance activities wdll beMs^Snded for certain periods during which 
maintenance may disrupt special evbfits that require uninterrupted service, 
(e.g., w'hen Congressional activities are® progress, the National Book 
Festival, End of Fiscal-Year activities Septerhber 30‘*’). The CIO and COP 
will identify these events and coordinate maintenance accordingly; and 

■» Emergency system maintenance - From time to time critical maintenance, 
such as utgbSt security patches may need-to be performed within business 
hours yvhich ma|impact on service availability. Staff will be notified and 
all attempts wdll be made to minimize the business impact of the changes. 

Maintenance windows are not included in the availability column of the SLA. 

4.0 Rous AND RtSPONtolBIimi-S 

4.1 The CIO RpspoNsiBiunis 

CIO has the following general responsibilities under this agreement, 

♦ Conduct business in a courteous and professional manner with clients; 

♦ Meet response times associated with the priority' assigned to client issues; 

♦ Ensure staff are appropriately trained and currency of training is maintained; 

♦ Maintain adequate escalation procedures with the Priority Matrix table; 

♦ Coordinate with COP on any maintenance that my impact the availability of COP 
systems even if it is during the maintenance windows; 

♦ Log and track all client requests for service through the Service Desk System; 

f Maintain and keep current all offered services; 

♦ Provide proper communication and notice of changes in services; and 

♦ Monitor and track all SLAs and report out results. 
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4.2 The cop Responsibilities 

COP has the folloiving general responsibilities under tliis agreement: 

t Be familiar with the CIO policies and procedures for governing the acceptable use 
of information and communication technologies and adhere to same; 

♦ Follow appropriate notification and escalation procedures; 

♦ Maintain a service unit help desk that serves as the primary contact point for 
Copyright users. The help desk provides tier 1 and tier-2 IT support and only 
forwards to ITS Service Desk requests and incidents that inyolve infrastructure or 
issues that are beyond the scope of COFs responsibility. 

♦ Determine appropriate support issue prterity{ H-P6) in cooperation rvith the 

Service Desk; r . 

♦ Be willing and available to provide criticalinformatibn within 4 hour.s of logging a 
request with the Service Desk for any urgent matters. 

♦ Notify the CIO Office of Copyright's business eloanges that impact the relevance of 

SLAs' ’ • 


4.3 ESCALATION PATH 0 '.., 

It is important to tlte-success dflihe relationship between OCIO and COP that both parties 
i-inderstand the Escalation chaterin the event that there is an SLA Breach, or a reported 
Service Incident, and agreement cannot be reached as to the root cause or resolution. The 
following escalation path should be followed: 

LMOffice of the CWef Information Officer, Deputy Chief Information Officer (DCIO) 
2?S:!©i£ice of the Chief Information Officer (OCIO), Chief Information Officer (CIO) 

3. Chief Operating Officer (COO) 

5.0 PERioific Review Process 

This SLA is a mutually endorsed document and will be periodically reviewed and 
changed w'hen the following events occur: 

♦ The technological capability has been drastically reduced. 

♦ Funds availability has been drastically changed. 

♦ Unscheduled service disruptions have greatly altered information system processes. 

This Service Level Agreement will be reviewed semi-annually in fiscal 2016 and annually 
thereafter to capture any expected changes in commodity IT service offerings and service 
levels. Contents of this document may be amended as required, provided mutual 
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agreement is obtained and communicated to all affected parties. The Document Owner 
will incorporate all subsequent revisions and obtain mutual agreements / approvals as 
required. 

Document Owner: 

Review Period: 

Previous Review Date: 

Next Review Date: 
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Title & Name 

Service Provider and Document Oioner 

Date 



Title & Name 

Customer 

Date 



Title & Name 

Date; ' 






Title & Name 
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Am XDi\ A: i>i s ixmoNS, Abbreviations, and Acronyms 



rii'.’ j^rocess responsible fox allowing users to maF<.- u-m' ' -..' 1 ' a 

data or other assete. Access management helps to protect the 
c;on.fidentiality, integrity and availability of assets by ensuring that only 
authorized users are able to access or modilv them. 

Asset 

Any resource or capability. The assets of a service provider include 
anything that could contribute to the delivery ot a service. Assets can be 
one of the following types: managemeirt, organization, process, 
knowledge, people, information, applications, infrastJ'ucture or 
financial capital. 

Audio & Video 
'r eieconf erencing (Vl'C) 

Audio & Video Teleconferencing Conferencing services provides 
technology and supporfctt) aid in the presentation and communication 
of relevant content and^^rmation to. Library staff, and special events 
during normal business ho^#p, 

Availability 

Availabilitv' of an IT service iS'd^termined by reliability, 
maintainabilit>% serviceability, j^erformance and security. Availability is 
usually caicuiatedvas a percentage. This calculation is often based on 
agreed service time and downtime. 

Commodity 11" 

Core services which mcluateLlT infrastructure (e.g., data centers, 
networks, workstations, and software applications,); and 

Enterprise IT services (e.g., e-Mail; web infrastructure, collaboration 
tools, security, identity and access lhanagement). Commodity IT is 
asset-oriented, while enterprise IT services may, at times, be more 
.utility-oriented (defined as purchasing by usage rate). 

Congress 

Where an incipient or task affects any congressional web site hosted on 
or in development by a LC system or team. 

Database 

Adirfhistration 

Supports. Library databases/database applications by developing 
architechite>. establishing standards, monitoring, managing, and 
addressing security related issues to databases during normal business 
hdurs. 

Desktop CdiSiputing 

This service provides support services for worksta tion.s and connected 
peripherals. Including print service.s which enable all computers 
cormected to the LOC network, including staff laptop.s connected 
wirelessly, to print to large multi-function devices and small deslctop 
printers. 

Ahs 

Department of Homeland Securipf 

Division/Office 

Where an affected system or service supports a building/ floor/partiai 
floor/ division/ office. 

Email 

Enterprise email supporting internal, employee to employee(s}, or 
external, employee to customer, vendors, or business partners. 

Enhanced users 

A small number of SU users, which have been permitted enhanced se.rvtcc 
due to their critical roles in the organization. 

Enterprise 

Where an incident or task affects a majorilv of Librarv users. 

Fulfillment Group 

The assigned team for Service Requests. 
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1 service provides support seiv kes inlei n.s! Iv' t'-' < '' ' ' , 

comprising of the following: 

* Application 

* Database 

* Server 

* Storage 

* Infrastructure 

Impact 

Impact is a measure of the extent of perceived elfect to systems or 
users and the potential damage to thffiorganization before the 
incident or ticket is resolved. .as 

Individual 

Where the requestor is a singleaseri ,. . . 

Information Security 
Management 

This service provides the proteefen of the. Library data and digital 
information and information-structure assets against die risk of loss, 
misuse, disclosure or damage. Develops, implements, and manages the 
controls that ensure thatThe Library is managing thc«e risks. 

Internet (ISP) 

Services provide secure network connectivity to the Internet. 

LOC 

Library of CotTgress 

Messaging & 
Collaboration 

This service provides tools and.capabilities that allow users to 
communicateand collaborate. This includes systems such as (e.g., 
SharePoint, InstanfcMessaging and GroupWise). 

Mission Services 

Mission Services arecois. purpose and functional capabilities of the 
Federal Government; such as .disaster response, food safety, and 
national defense and emptovment services. Some Mission Services may 
hai'e i single Federal organizationfocused on providing that service, 
while dflier mission services have multiple Federal organizations 
providing parts of a service. This may be due to statute, budget Or other 
taniquebapabilities an agency may have developed. 

Mobile Devices 

BeviebSisSh as iPhones^^ Androids, and tablets, These devices 
will be either validated (meets security requirements and has 
. undergone the assurance process defined by IT Security) or non- 
.validated (does not meet the security requirements and/or has 
not undergone the assurance process defined by IT Security). 

MOU 

Memorandum of Understanding - A MOD is a formal agreement 
between the CIO and a SU. MOUs shall be used by the CIO as follow- 
on documents to tire baseline SLA for the purpose of defining new or 
expanded services which are either not defined within the baseline SLA 
or w’hich need to be redefined. 

Non - Routine Tasks 

Consists of long term tasks that are not Projects and are not routing 
tasks which may require 1 to 6 months to complete. 

Norma! Business 

Hours 

The time period w'’hen a particular IT service is avaikible. Services will 
be provided between the hours of 7:00 a.m. and 5:00 p .m., Monday 
through Friday. (*Note: See Service Desk) 

CIO 

Chief Information Officer - CIO ensures the effective delivery of 
information technology resources and service.s in support of the 

Library's mission, functions, and activities. 

PrioriU' 

The measure of response expected from a Fulfilment Group or incident 
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ni.uiagernoiU leanv AUoweci icsponso times are measured in minutes, | 
hours and days. 

PI 

PrioriU' 1- During a PI incident the CIO wiil, witirin 1 5 minutes, | 

mobilize the resources required to work the incident. Management will | 
be informed and a PAO Announcement may be generated and 
delivered to the Pubiic Affairs Office for distribution. Within 4 
working hours the aO will resolve the incident. 

P2 

During a P2 incident die CIO wiE^ within 30 minutes, mobilize the 
resources required to work the incident.. .Management will be inioi med 
and a PAO Announcement may be generated and delivered lo the 

Public Affairs Office for distribution Within 8 working hour*, the CIO 
will resolve the incident. - - eC 

VIP Service Requests wEl be assigned a .P2 priority. Where a VIP 
request is added to a Fulfillment Group queue tire request will be 
treated as first in queu&^d fulfilled with the least delay • 

P3 

Routine requests wiUybehssigi'ied this priority level except for VIP 
requests. P3 requests will feplaced in queue and tulfi.Eed in turn 
(FiFO) by a Fulfillment Group(s). The Fulfillment Group(s) will 
respond to the request within 4 working hours and resolve the request 
within 5 days’ 

Use this priority whei^ an incident has occurred which does not ha ve 
an immediate operationMdmpact or where a workaround is available to 
the user. . ' 

P4 

A low priorit)' request that does notfithinediately impact the ability for 
a perso,n or team to complete their assigned tasks. P4 requests will be 
acknowledged within one day and will be resolved within 10 business 
days. . 

P5 

Assigit requests received from Project Teams to this category. The 

Project Team will establish the maximum time for fulfillment with the 
Fulfillment Group (s). Tire Fulfillment Group (s) will have 8 working 
hours to review the reque,st and respond to the Project Team and 30 
days to resolve the request. WCC Change Request Forms (CRF) for 
software and hardware will be assigned to this priority. All requests 
wiU be fulfilled by the requested or agreed upon date. 

P6 

Non-routine tasks which have extended compietion times will be 
assigned this priority. 

Priority Matrix 

CHig Priority Matrix establishes categories of urgency and acceptable 
response times for a given incident or Service Request. 

Processes 

Routine Service Requests which require multiple steps or an extended 
period to fulfill which do not directly affect a specific user. An example 
would include a change request for software to be approved which 
requires an extended amount of time to fulfill due to the number of 
.steps and groups inc'olved. 

Project Support Tasks 

Service Requests originating from a Project Team. To be used 
where a Project Team requires support from a Fulfillment Group 
outside the Project Team. 

Piiblit 

Where the system or service is commonlv available to the general 
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CiO Serv ic e lev el ag reeme nt 


j p ublic. 


I Resolution Time | The measure of time an incident or Service Rt‘quest can, remain i,n a 

! 1 non-resolved status before an SLA Breach occurs. 

I Response 'Time 

The time it takes for the Fulfillment Group or incident 
management team has to review a ticket and respiond. 

1 Service 

A means of delivering value to customers by facilitating outcomes 
customers want to achieve without the owmership of specific costs and 
ris.ks. 

Service D 0 S.k 

The single point of contact between the service provider and the users. 

The Help Desk will answer phoneealls and email from our LC End 

Users, 24 hours a day, and 363 days a year, to open trouble tickets. 'JTte 
Help Desk is closed on the tW04ioiidays July 4th and Christmas. Work 
on tickets opened after hoars andton weekends or holidays will begin 
at 7:00 AM the next bu^iess day. 

Service Desk Catalogue 

A structured document wi#i.information about all live IT, services, 
including those available ^deployment. The service catalogue is part 
of the service portfolio and contains information about tw^o types of TT 
service: customer-facing services that ai-e visible to the SUs; and 
supporting services required by the sewice provider to deliver 
customer-facmg services; 

Service Level Targets 
{SLT) 

Service Level Targets (StTlwSLTs are event-driven performance 
■criteria which give context to measures and provide a mathematical 
basis to understand organizationaiiperformance. 

St'i'vice Request 

A request for a routine service haS been submitted and will be routed to 
a Fulfillaient Group for action. There are no users or systems 
. experiencing an incident; 

Service Unit, 

Where ten affected system or service supports all or the greater part of a 
Service, Unit. 

SignMicance 

A term used to identify the different priority levels as a measure of 
importance to the organization. 

StA ''CiiC:, 

Service Level Agreement - The SLA specifies how specific services 
related to the operation and management of the commodity IT services 
will be measured. 

Service Level Agreement - An SLA is a document that establishes aft 
agreement between an IT service provider and a client to descrite IT 
services, specify the responsibilities of both parties, and document the 
expected service-level targets 

su 

Service Unit 

Support Services 

Support services are defined by the capabilities that support common 
business functions performed by nearly ail Federal orga.nizations. 

These include functional areas such as budgeting, financial, human 
resources, asset, and property and acquisition management. 

1’elecomrnunications 

This service provides solutions that support the LOG 
telecommunications needs. This includes the following: 

* Voice: Support for telephony tools, hardware, software, and voice 
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Telework/C'OOP - 
LapP}ps 

Urgency 


vU'.ia iiifriistrucUire 

« Data: Support for tools, hardware, and infrasti'uctiire that supports 
data transmission. 

* Facilities: Oversight support for the Library’ data center, to include 

power, location, and cabling. _ 

This service provides support for an employee to perform work, during 
any part of regular, paid houi^, at an approved aUernate worksite (e.g. 

home o r telework center). 

Is a means for categorizing how quickly an uicident or ticket needs to 

be re so lved. U__ ^ 

Where the requestor or the r^uestor's assistant appears on the 

approved VIP list. , 

Services provide secure network connectivity to the IDC wireless 
network for staff and the general public, 

In Building Wireless: The cellular network within the confines of 
LOC buildings proiridingstaff and visitors access tp.qxternal 
cellular carrier networks, both data and voice. 

Wi-Fi: The LCXH wireless local area network offered to staff and 
visitors to ^©vide data connectivity to the internet. l,OC Guest is 
the current LOC WhFi. 


I Work Degradation 


I Work Stoppage 


Suppor;}f^‘!rv.ices ' 


Where an IT system continues to be useable but performs below normal 
Operating levels. A system may be. slow to respond to user requests or 
part of a system mav fail entirely with other parts continuing to 

functi<>|L 

An interruption of IT services or access to one or move systems which 
results in one or more users hot being able to perform routine assigned 

tasks which they are normally able to pe r form. 

Support services are defined by the capabil ities that support common 
business functions performed by nearly all Federal organizations. 

These include functional areas such BvS budgeting, financial, human 
resources, asset, and property and acquisition management. 
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Ament, Douglas 

From: Yu, KanKan 

Sent: Wednesday, September 16, 2015 5:16 PM 

To: Daye, Stacian C. 

Cc: Ament Douglas; Banks, Al; Conklin, Judith; Farraj-Feijoo, Ricardo 

Subject: RE; CIO SLA Process Feedback (COP) 


Stacian, 

As we agreed in our last discussion, below are our compiled comments after reviewing the updated SLA document and 
the response spreadsheet to our previous commente. 

We saw that there were changes to the initial SLA documents based on our changes however the heart of our concerns 
have yet to be addressed in the new version. Please see below for comments. They also includes new comments after 
reviewing the recent iteration of the SLA document. 

I will append the list of Enhanced Users and their tides in a separate e-mail. 

Best, 

KanKan Yu 

• Services are not clearly defined in the document. While the document contains good information, it is not cogent 
and organized for the Business to understand what common IT services are provided across the enterprise 

• Details on how identified metrics will be calculated, measured, and reported 

• Per OCIO's response, CTO looks forward to the meeting to discuss the our two (2) issues regarding the statement 
"...baseline of services paid for by ITS will be whatever they provided in January 2015" 

• Under Desktop Computing, it states that "COP is financially responsible for Non-CORE software acquisitions and 
associated maintenance cost. COP is financially responsible for desktop and network printer acquisitions.". 

o This is very different from the current model where a single desktop is provided to ail LOC staff as well as 
network printers. In addition, this impacts MS Office and the MS 0/S since these are not spelled out in 
the CORE software. 

o Do we need to specify the current SCCM functionality? Or do we also need to specify keeping software 
such as JAVA etc. up to date. Also how does this work with the pending LOC printer contract that 
presumably will cover this. 

• Questions and comments regarding the Service Level Target table. 

o 99% appears to be the common availability metric for everything. In some cases this is too low a mark 
and in others too high, Wouldn't a better approach be to start out using the industry standard metrics? 

o Hosting Services and Messaging & Collaboration- What about availability during prime hours & after 
hours? 

o Information Security Management - Does this Include virus protection, IDS, firewalls, SOC services, 

patching, etc These are usually not bundled together since SLAs differ. Also, these are not about 

availability, but instead execution of the services 

o ISP - Should the document start with Vendor Minimum SUs? Often times the vendor may offer a hiaher 
SLA than 99%. ^ 

o Where do laptops fall? They are not mentioned here or under desktop computing in this table 

• Backup and Recovery are not discussed in the SLA. This appears to be a major oversight. Other areas not 

mentioned include: Asset Management, Peripheral Devices, Remote Access, Change Management SuDoort 
(Administrator & Engineering) = » pk 

o Peripheral Devices are not mentioned in the SLAs. This leaves out a significant number of other devices 
in use m COP. It would be beneficial to call these out to avoid confusion and misunderstanding 

• What about refresh cycles? Is this above and beyond the scope of the SLAs? See the standard examples 
included in the table, 

Example; 
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Type of Equipment 

Refresh Cycle 

Desktop & laptops 

3 yeare 

Servers/SANS/Network Equipment 

5 years 

PDAs, iphones 

2 years 

Printers/Scanners/Peripherals 

5 years 

Smaller Inexpensive Peripherals 

Treated as disposables 


• Are there SLA metrics surrounding customer satisfaction? 

• we have additional questions regarding audits and IV&V performed. If there are disagreements of the results, 
what will be next steps for resolution? 

• Will business unit escalation paths be documented in Section 4.3 as well? 


From: Daye, Stacian C. 

Sent: Thursday, September 10, 2015 6:57 PM 
To: Farraj-Feijoo, Ricardo; Yu, KanKan 
Cc: Ament, Douglas; Banks, Al; Conklin, Judith 
Subject: RE: CIO SLA Process Feedback (COP) 


All, 


Attached are the documents that we reviewed in this morning's meeting. 


« File; DRAFT_COP_Service_Levei_Agreement_9-10-15vl.doc» 


« File: COP SLA Feedback 9-10-15. xlsx » 
''lHanJij, 

Stad 


« OLE Object: Picture (Device Independent Bitmap) » 
Stacuin C ^Vctye 
Ojjue ofStnttefpc Iniliativcs/ 

Information ^kdnoCo/jy Skviccs 
sc[ane@Coc.^(rv 
(Pfuriic: 20Z-7Q7-97S8 


From; Daye, Stacian C. 

Sent: Thursday, September 10, 2015 9:42 AM 
To: Farraj-Feijoo, Ricardo 

Cc: Ament, Douglas; Banks, Al; Conklin, Judith; Najia, Dina; Yu, KanKan 
Subject: RE: CIO SLA Process Feedback (COP) 


(.*ood N]orjii.ng 
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vVe cire .stil! on st:h<?dule to meet totiav. Ail of your questions and. co.mmeols will be .revkn\ od arii.! dist:\jsstx.i 
dourine, toiiav's nieciing. A.n updated SLA document will also be distributed at the meeting. 


Sec you soon! 

Sian 

o ^ Ob oc Pk!i e (De ace Independent Bitmap) » 

t! U.ll(i 

I j, y /< ii 

}, i '<.S 


From; Farraj-Feijoo, Ricardo 
Sent; Thursday, September 10, 2015 9:03 AM 
To: Yu, KanKan; Najia, Dina; Daye, Stacian C. 
Ce: Ament, Douglas 

Subject: RE: CIO SLA Process Feedback (COP) 


Are we still meeting today ? We have not received any feedback regarding our initial comments, 
Thanks, 

Ricardo 


From: Yu, KanKan 

Sent; Wednesday, ISeptember 09, 2015 12:25 PM 
To; Najia, Dina; Daye, Stacian C. 

Cc; Farraj-Feijoo, Ricardo; Ament, Douglas 
Subject: RE; CIO SLA Process Feedback (COP) 


Dina, Stacian: 


Are there any documents a.ssociated with this meeting other than the corpment document and samples we sent in ,juty? 

Thanks, 

KanKan 


Original Appointment — 

From; Najia, Dina 

Sent; Thursday, September 03, 2015 8:52 AM 

To. Najia, Dina, Conklin, Judith; Banks, Al; Daye, Stacian C.; Farraj-Feijoo, Ricardo; Yu, KanKan 
Cc: Ament, Douglas; David, Kimble A. 

Subject: CIO SLA Process Feedback (COP) 

When: Thursday, September 10, 2015 11:00 AM-11:30 AM {UTC-05:00) Eastern Time {US & Canada) 
Where: Judith's (New) Office LM 630 


3 



341 


COP Feedback to CiO on SLA Process 
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Yu, KanKan 

From: 

Banks, A! 

Sent: 

Tuesday, September 29, 2015 11:18 AM 

To: 

Yu, KanKan; Farraj-Feijoo, Ricardo 

Cc: 

Daye, Stacian C.; Wilson, Tina 

Subject: 

Status of SLAs 


Hi Ricardo, Kankan, 

Just a quick update. The SlAs will be distributed to the ITSC members early this afternoon for final review and 
signature. The CIO is asking the iTSC members to sign on behalf of their respective service units. As agreed to at the last 
!TSC meeting the SLA document acknowledges the outstanding issues and OCIO's commitment to addressing them, and 
for the sake of Library meeting the Oct 1., GAO deadline, we will sign off on the SLAs now, 

! happened to see Doug at coffee this morning and updated him on the above status. 

Please let me know if you have any questions i can answer. Thanks again for your help with this important goal for the 

IC. 

Ai 

79562 
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Ament, Douglas 


From; 

Sent: 

To: 

Cc: 

Subject: 

Attachments; 


Elmore, Nigel 

Tuesday, September 29, 2015 1:28 PM 
Ament, Douglas 

Barton, Bud; Conklin, Judith; Banks, A1 
SLA for COP for signature 

COP„ Service_LeveLAgreement_9'29'2015_Fin3l.doc 


Doug: 

Attached please find the Service Level Agreement (SLA) between the Office of the CIO and the Copyright Office. 

Please print the document, then sign and date on the signature page {Section 6.0, page 14). Afterwards, please email 
Nigel Elmore {neini@loc.gov] that you have signed the SLA, and then deliver the physical signed copy to Cynthia 
Henthorn in LM-637 [cyhe@ioc.gov; 7-1934|, 

We need the signed documents returned by Wednesday, September 30, 2015, to meet the GAO implementation 
deadline. 

As was stated in the September !TSC meeting and as Judith Conklin (acting DCIO) has explained to each of you 
individually, OCIO realizes some service units have additional concerns, all of which OCIO plans to address as soon as 
possible after the September 30th deadline. 

We appreciate you support and patience with this effort. 


Bernard Barton, Jr., CIO 
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Service Level Agreement 
(SLA) 

BETWEftN ^ 

THE UNITED STATeI COPYRIGHT OFFICE (COP) 

ApD 

THE CHIEF INFORMATION OFFICER (CIO) 


For the pwiod Oelhber 1 , 2015 - September 30, 2016 
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CiO Service Level Agre ehemt 


Document Information and Approvals 



!m> ’KV ! 



Revised By 

Reason for<lian^ 

0. 

CIO 

Initial draft 


o MVH 

CIO 

Revisions siij’gcsted by hitcnni i 


7A)/15 

CIO 

Revisions suggested bv Deputv CiO <.v; bUs 


7/i47i5 

CIO 

Revisions suggested by Intenm CIO, 

Deputy CIO^ and SUs. 

0.5 

V-o/is 


Revisions suggested by Interim CIO, 

Deputy CIO^ based on questions and 
comments submitted by SU after their 
review of the Draft SLA document. 

0.6 

S/2^35 

CIO 

Revisions suggested by Deputy CIO. 

0,7 

9/28/15 

CIO 

Revisions suggested by Deputy CIO & SUs. 

; -LO 

9 / 2^15 

CTO 

Approved 


[document Approvals 


u> 

i Project Role 

Signaturc/EIectronk Approval 

i 

: Bernai-d Barton ]r, 

1 Project Sponsor 

Approved 

\ 8/2tV^5 

; Judith Conklin 

; Project Sponsor 

Approved 

i 8/2?^.5 

i Ai Banks 

! OCIO Responsible Manager 

Approved 

; 8/28/15 
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CIO Service Level Agree ment 

Tabi,e of Con tents 

4 

1.0 Introduction i 

1 .1 Overview of CIO ^ 

1.2 Scope of Agreement ^ 

1 .3 Assinn p tions --AAS,- ■ ' 

1 .4 Outside CIO's Control i-w.:.-. ^ 

2.0 IT Services - 3 

2.1 Commodity IT Services .s#'. 

3.0 Systems Maintenance Sc Policy 

4.0 Roles and Responsibilities 

4.1 The CIO Responsibilities c. V « 12 

4 2 The CO? Responsibilities i.y ..,. ..ydRym-. 12 

4 .t hSCATATION PATH OVS dsm 12 

5.0 Periodic Review Process 13 

6 0 Signatures i 

Appendix A; Definitions, Abbreviations, and Acronyms 16 

Appendix Bt Enterprise-Wide Applications 20 

Appendix G: COP Service Exceptions 22 

Appendix D: COP Priority Matrix Enhanced User List., 23 
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Service level agreement 


1 I lK 01 Ik\% iA i'lO 

1 'r ri’iol b'io 'RUion Officer (CIO) ensures the effective delivery of information 
e I'lH'l 1 — 'utces and services in support of the Library's mission, functions, and 
\ *n UK R 1 ho inission of CIO is to provide reliable and effective information systems 
111 ' eki ouimiin'cations services to the Library in support of its efforts to serve Congress 
a 'd 1 1 ,e n 't'R 'o manage and provide access to its collections, and plan, design, and 
inplu.R d s\ stems that define the future digital library and mfoimation infrastructure. 

1.2 Scope OF Agreement 

This is a Service Level Agreement (SLA) between CIO and the Library of Congress (LOC) 

United States Copyright Office (COP) for the period October 1, 2015 through September 

30, 2016. The purpose of this SLA is to establishbaseliHe support levels for Commodity IT 

services that are provided by CIO to COP. 

■ 

This SLA is binding upon C,lO and COP. The cflO and COP mav change this agreement 
when widespread service-affecting issues arise, newTeehnologies develop, or 
requirements change. All modifications must be agreed-upon by both the CIO and COP. 
The CIO and COP agree to engage in gooddaith efforts to resolve any problems which 
mciy ar.ise. 

As needed and appropriate Memoranda of Agreement (MOUs) will establish support 
levels for speciali/od CIO support not covered in this agreement. 

Note: In the interest of time, and th&Jipproiiching $^tember 30"' deadline, the Acting Deputy 
1 10 and the SLA Pioji 1 1 Team has re^tmskd tint the SUs let the SLA document go forward and 
OCIO agreed to address all oftlwsSUs exinctmMs soon as possible, after the September 30"' 
deadline. 

1.3 Assumitions 

This agreement relies on certain operational assumptions. Should any of these 
assumptions change, then the CIO and COP will negotiate and agree upon any necessary 
adjustments to this agreement. 

♦ Support levels established by this agreement will be provided. 

♦ All IT-related mandates, such as regulatory or Congressional, have been accounted 
for in thi.s SLA. 

1.4 Outside CIO's Controi, 

The services provided under this SLA may be temporarily suspended in part or in full by 
the CIO or other LCXf or LI.S. Government officials in the instance of unplanned, 
widespread, service-affecting issues. The services will be considered to be in "reduced 
service mode" in the instance of serv'ice-affecting issues which render the entire LOC 
enterprise unusable or severely degraded, these may include; 
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CIO S ervice level agreement 

ant of Homeland Security (DHS) alerts; 

\ V to o catln 1 <ir other natural occurrences like earthquakes, asteroid strikes, etc. 
enth ei.,cl wide-area communication links, or utiliU' sert'ices or prevent 
I 1 .rni, .ao', iiom reaching their workplaces; 

» X CiO' r I nnw rt shutdown, declared by the Office of Personnel Management; 
t oe) tai ' NCv aritv threats and attacks; and, 

Vnw'med hie & .safetvr testing. 


Restoration of services covered under this SLA may be subjeef to factors outside of CIO's 
control. These may include vendor lead time (for purchases Or \ endor-provided repairs) 
and service provider lead time. 

Unless specifically stated otherwise, OCIO wiD pay the cost of the.conrmodity level 
service offerings pending availability of funds. 
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Uv '-t \ K -'s I su\, hi ! e are standard, meaning that these sendees are provided at no cost 
to COP. 

As noted bv the Federal I nformation Technology Shared Sendees St rategy', and the 
Federa l IT Shar ed Ser vic es Implementation Guide^ , there are three general categories of 
shared services in the Federal Government: commodity IT, support, and mission services, 
as described below: 

1. Commodity IT Sendees - As described in OMB Memorandum M-11-29r 
examples of commodity IT shared services opportunities include: 

• IT infrastructure (e.g., data centers, netrvorks, workstations, and core 
software); and , 

• Enterprise IT services (e.g,, e-Mal; web infrastructure, collaboration tools, 
security, identity and access maragement). Commodity 1 1'is nsset-ociented, 
while enterprise IT sendees may, abfimes, be more utility-oriented (defined 
as purchasing by usage rate). 

2. Support Services - Are definedby the capabilities-ttet support common business 

functions performed by nearly all Federal organizations. These include functional 
areas such as budgeting, financial, human resources, asseteproperty, and acquisition 
manage,!:n,ent, pi-jn 

3. Mission SeMce.s - These arc core purpose and functional capabilities of the Federal 
Government; such as disaster response, food safety, and national de.fense and 
employment services. Some Mission Servicesinav have a single Federal organization 
focused on providing that service, wMIe other mission services have multiple Federal 
organizations providing parts of a sendee. This may be due to statute, budget or other 
unique capabilities an agencvimay have developed. 

The scopeipf this SLA will cover Commodity IT Sendees. 


I;t.toiniaiK)n Tcchnoio^v Shared Services Strategy, Office of Management and Budget (0;\[H), Office ofE- 
> < I' littiiauioti Uclirolog}', May 2, 2012 

vJ >i M g _ M u<.tau!t/'fi!es/omb.’’'assets/egov docs/sliared scrvice.s srraicgv -p;!i 
t I 11 Tutu^n Jt.v.hnolog\ Shared Services Implementation Guide, CIO Coxincil, .\pril O, 2 nl.l 

, vp c ii.tiii_e42lo.f ds_.Jovv?iioads/2013.'<)4/CIOC-Federal-Sharcd-Sen.!' e x Impknn t _ i _pj| 

! 1 1 .-i. cu n 1 id Budget M-11-29 . Chief Information Officer Author.nes, .-XiuiiTst K, Si i ] I 
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CIO SE RVIC6 LEVEL AGREEMENT 

l;t • ; MS !\ ! MM KN ANCE & P OLICY _ 

Ths k liowuis isim(s may impact service availability: 

' riamied niainlename windows -CIO is required to update and nvir.iani ti'i 

ti'il'nicai mja'-lruiture on a regular basis per Maintenance Polict dated Ini' ' ?0! i 
; he agreed change windows for this work are; 

♦ Maintenance activity that is expected to take less than 4 hours wiSi t.sko 
place on the first and third Tuesday of each month beginning at 'l:OS)pm 
Tuesday and ending by 3:00am on Wednesdav,;^ ^ 

♦ Maintenance actiedty that is expected to take less, than 12 hours to complete 
w'ill take place on the second and fourthiSundaylif each month beginning at 
6:00am and ending by 6:00pm the same dayc "tii c 

♦ Maintenance activities will be stapended for certain periods ciuring which 
maintenance may disrupt special events that require uninterrupted service, 
(e.g., w'hen Congressional activities are in progress, the National Book 
Festival, End of Fiscal Year activities September 30>''). The CIO and COP 
will identify these eventsand coordinate maintenance accordingly; and 

f Emergency system maintenance - From time te tiitie critical maintenfinCe, 
such as urgent security patches may need to be performed within business 
hours which may impact on service availability. Staff will be notified and 
all attempts will bo made to minimize the.busine,ss impact of the changes. 

Maintenance wihddws arSiaot.ihcludecl in A availability column of the SLA. 
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U '<1,1 ■- > f U' MONSIBILITIES ____ 

I i I ) KisrCNSUilllllES 

L 'iMw iix tclLnv inj\ general responsibilities under this agreement: 

■i L iLi J 'la husiness in a courteous and professional manner with clients; 

' ' 1 , 1 1 o'-pnnse times associated with the priority assigned to client issues; 

1 I ' t slalt are appiopriately trained and currency of haining is maintained; 

- h lauiLun adequate escalation procedures wdth the Priority Matrix table; 

♦ Coordinate with COP on any maintenance that my impact the availability of COP 
systems even if it is during the maintenance window; 

♦ Log and track all client requests for service tlirough the.’Service Desk System 
» Maintain and keep current ail offered servdees; 

♦ Provide proper communication and noticewf changes in services; and 

♦ Monitor and track ail SLAs and reportoHt results. 

4.2 The COP Responsibilities 

COP has the following general re.sponsibilities undenthis agreement: 

♦ Be familiar with the CIO policiM a.nd procedures for governing the acceptable use 
of information and communicatiori vtechnologies andiadhere to same; 

♦ Follow appropriate notification and escalation procedwes; 

Maintain a service unit help desk that servesias the primary contact point for COP 
users The help desk provides tier 1 and tier 2 IT'support and only ferrwards to ITS 
Service Desfef-requests’and incidents-that mvolvednfrastructure or issues that are 
bevoncl the seepe of COB; responsibility 
« Determine apptxjpnate support is,sue prmrity( P1-P6) in cooperation with the 
Sei vice Desk, 

♦ Be willing and available to provi'feim'ticai mformation within 4 hours of logging a 
request with the -Service: Desk tor any urgent matters. 

:Notify the CIO 0:tfice of COPbusiness changes that impact the I'elevance of SL.As. 
4.3ESCAl,ATIOXF.ATH 

It is important to the success of the relationship between OCIO and COP that both parties 
understand the e-scaiation chain in the event that there is an SLA Breach, or a reported 
Service Incident, and agreement cannot be reached as to the root cause or resolut.ion. The 
following escalation path should be followed; 

1. Office of the Chief Information Officer, Deputy' Chief Information Officer (DCIO) 

2. Office of the Chief Information Officer (OCIoj, Chief Information Officer (CIO) 

3. Chief Operating Officer (COO) 
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iS’L lOC \ i'ROCESS 

mui. ilh endorsed document and wdll be periodical U ie\ie\\t'dani 
...i.aigec \ liL n the (A'l’ovvmg events occur: 

♦ The technological capability has been drastically reduced. 
l> Funds availability has been drastically changed. 

♦ Unscheduled service disruptions have greatly altered information system processes. 

This Service Level Agreement will be reviewed semi-annuallyrm fiscal 2016 and annually 
thereafter to capture any expected changes in commodity IT service offerings and service 
levels. Contents of this document may be amended as required, provided mu tual 
agreement is obtained and communicated to all affected parties. The Document Owner 
will incorporate all subsequent revisions and obtainniHtual agreements / approvals as 
required. 

Document Owner: OCIO 

Review Period: October 1, 2015 - September 30, 2016 
Previous Review Date: N/.A 

Next Review Date: -..r.- 




Service level agreement 


CIO _ 

1. ,Tj,\U c 



OCIO/CIO - ITSC Chair 

Ka.eo 

Title 

Signature 

Date 


COP/ITSC Member 

Name 





Signature 


Sate 
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'li'i'i ''i' '!\ A , Oi 1 i iONS, Abbreviations, and Acronyms 




Access Management 

The process responsible for allowing users to make use of IT services, 
data or other assets. Access management helps t;o protect the 
confidentiality integrity and availability of assets by ensuring tliat only 
authorized users are able to access or modify them. 

Asset 

Any resource or capabUity . The assets ofca service provider include 
anything that could contribute to the delivery ot a service. Assets can be 
one of the following types; mana^ment, oigani/ation process, 
knowledge, people, informationyiappiications. mUastiucture or 
financial capital. 

Audio & Video 
'T eleconf e re n c i n g ( V'l’C) 

Audio & Video Teleconf^ncing Conferencing services provides 
technology' and supp(»t^to aid in the presentation and com.munication 
of relevant content and ir^brmahon to. Ubrarv staft, and special ( vents 
during normal business hours. 

Availability 

Availability of an IT ser\T.ce i&Adetermined by reliability, 
maintainability, serviceability, pferformance and security. Availability is 
usually calculated as a percentage. This calculation is often based on 
agreed service time and downtime 

CornniofUlv IT 

Core services wWch inclafe lT infrastructare (e.g., data centers, 
networks, workstattons„and software applications,); and 

Bnterpnse IT sen'ices {e.g., e-Mail, :web mfrastructure, collaboration 
tools, seeurity, identity and access management). Commodity IT is 
asset-ortented, while enterprise IT services may, at times, be more 
Htiiitv-oriented (detmed.asipurchasing by usage rate). 

Congress 

Where an inijidwit or task affects any congressional web site hosted on 
or te developmentby a 1C system or team. 

Da.ta'ba|'e 

Administration 

SuppottssLibrary databases/ database applications by developing 
architectare, establishing standards, monitoring, managing, and 
addressing security related issues to databases. 

Desktop C'omputing 

Tlus service provides support services for workstations and coimected 
peripherals. Including print services which enable all computers 
connected to the LOC network, including staff laptops connected 
wirelessly, to print to large multi-function devices and small desktop 
printers. 

DHS 

Department of Homeland Security 

Division/Office 

Where an affected system or service supports a building/ floor/ partial 
t ioor / d i vision / office. 

Email 

Enterprise email supporting internal, employee to e,inplovee(s), or 
external, employee to customer, vendors, or business partners. 

pjih. meed usi rs 

A small number of SU users, which ha%^e been permitted enhanced service 
due to their critical roles in the orgatiization. 

1 nti'i pi 

Where an incident or tek affects a majoritv' of Library users. 

f alullm ’ It Ciivnsp 

The assigned team for Service Requeste. 

1 io-rlvip- ''e \ kCN 

This service provides support services internal to LOC environment 


15 ! P g ■; V- 
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comprising ol Uio iollowing: 

» Application 

* Database 

* Server 

* Storage 

* Iirfrastnicture 

Impact 

Impact is a measure of the extent of perceived effect to systems or 
users and the potential damage to the organization before the 
incident or ticket is resolved. ? . , 

Individual 

Where the requestor is a single uses. . 

Information Set uriL\ 
Management 

T his service provides the prot^tion of die Librari' information and 
information structure assets aga&t the risk of loss, misuse, disclosure 
or damage. Develops, implementsyand ma.nages the ccmriols that 
ensure that the Library is:managing these risks. . 

Inti met (!'’!’) 

Services provide securemetwork connectivitv' to tHelnternet. 

LOC 

Library of Congress ■ 

Messaging & 
Collaboration 

This service provides tools andcapabilities that allow users to 
communicate and collaborate. This include-s systems such as (e.g.,, 
SharePoint, Instant Messaging and,GroupWi.se). 

Mission Services 

Mission Services^^® core purpose and functional capabilities of the 
Federal Govemmantyjstich as di-saster response, food safety, and 
national defense and employment services. Some Mission Services may 
have a single Federal organization tocused on providing that service, 
while otlter mission services have smltiple Federal organizations 
providing parts of a service. This may be due to statute, budget or other 
unique capabilities an agency may have developed. 

Mobile Devices 

Devic&such as iPhones, Androids, and tablets. These devices 
will be either validated (meets security requirements and has 
undergone the asssShnee process defined by IT Security) or non- 
validated: (does not meet the security requirements and/ or has 
not undergone the assurance process defined by IT Security). 

MOU 

Metftorandum of Understanding - A MOU is a formal agreement 
between the CIO and a SU. MOUs shall be used by the CIO as follow- 
on documents to the baseline SLA for the purpose of defining new or 
expanded services which are either not defined within the baseline SLA 
or which .need to be redefined. 

Non - Routine Tasks 

Consists of long term tasks that are not Projects and are not routing 
tasks which may require 1 to 6 months to complete. 

Normal Business 

Hours 

The time period when a particular IT service is available from the 0C!0 
Service Desk. Services will be provided between the hours of 7:00 a.m. 
and 5:00 p.m., Monday through Friday. (*Note: See Seivice Desk) 

CIO 

Chief Information Officer - CIO ensures the effective delivery of 
information technology resources and services in support of the 

Library's mission, functions, and activities. 

Priority 

Tlie measure of response expected from a Fu!filme.nt Group or incidetit 
management team,. Allowed response times are measured in niinutes, 
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hours and days. 

PI 

Priorily 1- During a PI incident the CIO will, within 15 minutes, 
mobilize the resources required to xvork the incident. Managen:\eiit w’ill 
be informed and a PAO Armouncement may be generated and 
delivered to the Public ^Affairs Office for distribution. Within 4 
\¥orking hours the CIO will resolve the incident. 

P2 

During a P2 incident the CIO will,, wdthin 30 minutes, m< 'bui/t 11 a 
resources required to ’work the incident. Management ^vill lx ustoi met! 
and a PAO Announcement may be generated and delivered to the 

Public Affairs Office for distribution. Within 8 working hours tiw l'h> 
will resolve the incident 

Enhanced User Service Request^ will be assigned a PE prioriW he> e 

an Enhanced User request is added to a Fulfillment Group queue tlie 
request will be treated as fiist inqueue and fulfilled with the least 
delay. 

P3 

Routine requesfe will be assigned this priority level except for 

Enhanced User requests, PSrrequests. will be placed in queue and 
fulfilled in turn (FIFO) by a Fulfilment Group(s). TheiFuifiliment 
Group(s) w'Ul respond to the request within 4 w'orking hours and 
resolve the reqii€^t within 5 days. 

Use this priority where. an incident has Occurred wf ich does not have 
an immediate of«}rational impact or where a workaround is available to 
the user. 

P4 

A low priority request that docs not immediately impact the ability for 
a person or team to complete theirsissigned tasks. P4 requests will be 
acknowledged withiriione day and will be resolved within 10 business 
days. ;; 

P5 

Assign requests received trom Project Teams to this category. The 

Project Team wilt establish the maximum time for fulfillment with the 
Fulfiltaent Group ( b ): The Fulfillment Group (s) will have 8 working 
-hours to: review the request and respond to the Project Tea:m and 30 
days to rcsoiwithe request VVCC Change Request Forms {CRF) for 
softw'are and hardware will be as.signed to this priority. All requests 
wuil be fuifilied by the requested or agreed upon date. 

P6 "O/i., 

Non-routine tasks which have extended completion times will be 
assigned this prioritv. 

Priority Malnx 

,^he Priority Matrix establishes categories of urgency and acceptable 
response times for a given incident or Service Request. 

Processes 

Routine Service Requests which require multiple steps or an extended 
period to fulfill W'hich do not directly affect a specific user. An example 
would include a change request for softw'are to he approved which 
requires an extended amount of time to fulfill due to the number of 
.steps and groups involved. 

Project Support Tasks 

Service Requests originating from a Project Team T o be used 
where a Project Team requires support from a 1 ultilinu nt Gump 
outside the Project Team. 

Public 

Where the system or service is commonly available to the mneuil 
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Term . v 

public. 1 

Resolution Time 

Response Time 

I'he measure of time an incident or Service Request can remain in a | 

non-resolved status before an SLA Breach occurs. | 

How long a Fulfillment Group or incident management team has 
to review a ticket and provide a response. 

Sei"vit:e 

A means of delivering value to customers by facilitating outcomes 
customers want to achieve without the ownersliip of specific costs and 
risks. 

Service Desk 

The single point of contact between the service pix)vider and the users. 


The Help Desk will answer phone eaBs and email from our LC End 

Users. 24 hours a day, and 363 days a year, to open trouble tickets. The 
Help Desk is closed on the twoihoEdays July 4.th and Christmas. Work 
on tickets opened after hoars andmn weekends or holidays will begin 
at 7:00 AM the next bupiess day. 

Service Desk Catalogue 

A structured docun#h{A®% information about all live 11 sei vices, 
including those available fordeployment. The sert ice catalogue is part 
of the service portfolio and ccihlams information about two type of IT 
service: customer-facing serviceSvBiat are visible to the SUs; and 
supporting services required by the service provider to deliver 
customer-facing services. 

Service Level 

Agreenienl; (SLA) 

An SLA is a document that establish* s an agreement between an IT 
service provider and a client to descnbe lT services, specify the 
fespoBsibililies of both parties, and document the expected service- 
level 'targets. 

SLA Breach 

rxceecfihg the maximum nme frame required for the effec^i^^e respoase or 
the timeframe required fo.t:i;be ticket solution in accordance with tlie i:ernis 
and levelof the ucket solution in compliance with its cat€gori 2 ;adon in the 
Pnonrv Matrix 

Service Level Taigets 
(Sl.T) 

Servieetlsevel Targets (SLT) - SLTs are event-driven performance 
:Cnteria Which give context to measures and provide a mathematical 
basis to understand organizational performance. 

5t^rvice"R'C-jqti.est 

A request tor a routine service has been submitted and will be routed to 
a Fulfillment Group for action. There are no u,sers or systems 
experiencing an incident. 

Service Unit (SU)T''^- 

Labrarv support business unit. 

Significance 

A term used to identify the different priority levels as a measure of 
importance to the organization. 

Support Services 

Support services are defined by the capabilities that support common 
business functions performed by nearly all Federal organizations. 

These include functional areas such as budgeting, financial, human 
resources, asset, and property and acquisition management. 

'Ti’lecomm unica lions 

This service provides solutions fcat support the LOC 
telecommunications needs. This includes the following: 

• Voice: Support for telephony tools, hardware, sofhvare, and voice 
data infrastructure 

• Data: Support for tools, hardware, and infrastructure fliat supports 
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oaici ti'aiiswissioru 

• Facilities: Oversight support for the library data center, to include 
power, location, and cabling. 

Telework/COOP - 
Laptops 

This service provides support for an employee to perform -work, during 
any part of regular, paid hours, at an approved alternate worksite (e.g. 
home or telework center). 

Urgency 

The categorization of how quickly an incident or ticket needs to be 
resolved. 

Wireless 

Services provide secure network conaectivUv to the LOC wireless 
netw'ork for staff and the general pablic. 

In Building Wireless: The cellular network wdthin the confines of 
LCXf buildings providing staff and visitors accx’ss to external 
cellular carrier networks, both data and voice. 

Wi-Fi: The LOC wirelessTocal area network offered to staff and 
visitors to provide dataicormectivity to the intetfset. LOC Guest is 
the current LOC Wi-Fi. "S ss?*’ 

Work Degradation 

Where an IT system continues tp be useable but performs below normal 
operating lev^Si-. A system may be.siow to respond to user requests or 
part of a system entirely with ptlrer parts contir\uing to 

function. 

Work Stoppage 

An interruption of IT services or access to one or more sy.stems which 
results in one or more users not being able to perform routine assigned 
tasks which they are normally able to perform. 
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Ament, Douglas 


from: 

Banks, A! 

Sent; 

Tuesday, September 29, 2015 3:47 PM 

To: 

Yu, KanKan; Oaye, Stacian C. 

Cc: 

Ament, Douglas; Farraj-Feijoo, Ricardo 

Subject: 

RE; ao SLA Process Feedback (COP) 

KanKan, 



Thanks for the feedback. The SLA documentfs) were sent to Doug earlier this afternoon for signature. 


Thanks again for your participation in this process. The recommendations and ideas that vve received we received from 
Copyright, and you and Ricardo specifically, helped improve the overall service level agreement standard language for ai! 
organisations. 

Thanks, 

AI 


From: Yu, KanKan 

Sent: Tuesday, September 29, 2015 3:43 PM 
To: Oaye, Stacian C. 

Cc: Ament, Douglas; Banks, Ai; Farraj-Feijoo, Ricardo 
Subject; RE: CIO SLA Process Feedback (COP) 


Stacian, 

You would need to follow up with Doug and Ricardo regarding acknowledgements, approvals, and signatures for the SLA 
document. 

Please see completed table below: 


.* w 


Spconiijr) Coal.Kt 

CTO 

Doug Ament 

Chief Information Officer, 
Copyright 

Ricardo FaiTaj-.Feijoo 
Director, Copyright ’r‘ech,nok)gy 
Office 


Thanks, 

KanKan 


From; Daye, Stacian C. 

Sent; Monday, September 28, 2015 8:15 PM 
To; Yu, KanKan 

Cc; Ament, Douglas; Banks, AI; Farraj-Feijoo, Ricardo 
Subject: RE; CIO SLA Process Feedback (COP) 
Importance: High 

l 
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Hi Kankan, 

Wo are in the process of finalizing the SLA document for distribution and signatures. Please update the 
following table with the list of names for the SLA Communication Points of Contact. 


« COP SLA Communication Points of Contact 
The' following points of c.:ontac::t tor execution of the SLA are: 



'IfnxiiJis', 

S'tad 

« OLl: Object: Picture (Device independent Bitmap) » 
Stadan C 

Ofjxce ofStmtepc Initiatives/ 

/ nfnrmation 'iMfmology Smices 
^Eniaii: sdlm^lhcfuni 
(Pftom: 2l}Z''70r-978S 


From: Yu, KanKan 

Sent; Wednesday, September 16, 2015 5:25 PM 
To: Daye, Stadan C. 

Cc; Ament, Douglas; Banks, A!; Conklin, Judith; Farraj-Feijoo, Ricardo 
Subject; RE: CIO SLA Process Feedback (COP) 


Stacian, 

Below are the names we would like to add to Copyright Office's "Enhanced Users" list 
« Maria Pallanle - Rcgi.stcr of Copyrights 
a Catherine Rowland - Special Advisor to the Register of Copyrights 
® Syrecta Swann - Special Assistant to the Register 

2 
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® Jacqueline Charlesworth - General Counsel and Associate Register of Copyrights 
® Sy Damle - Deputy General Counsel 

® Karyn Temple Claggetl - Director of Policy & International Affairs and Associate Register of 
Copyrights 

• Maria Strong - Deputy Director of Policy & International Affairs 

® Robert Kasunic - Director of Registration Policy & Practices and Associate Register of Copyrights 
® Erik Berlin - Deputy Director of Registration Policy & Practices 

» William Roberts - Director of Public Information & Education and Associate Register of Copyrights 
® Elizabeth Scheffler - Director of Office of Public Records and Repositories 
® David Christopher - Chief of Operations, Copyright 
8 Douglas Arneiit - Chief Infonnation Officer, Copyright 
® Ricardo Farraj-Fcijoo - Director, CopjTight Technology Office 

We would see that Suzanne Barnett (Chief Copyright Royalty Judge) be added to the Enhanced User List but please 
note that CRJ is not a part of the Copyright Office and any IT-related questions from Judge Barnett should be handled by 
ITS and not forwarded to us for response, 

Please let me know if you have any questions/concerns. 

Thank you, . 

Copyright Technology Office j U,S. Copyright Office 
Library of Congress 
http://www, cQPv riKh t.go v 
( 202 ) 707-9262 


From: Daye, Stadan C. 

Sent: Thursday, September 10, 2015 6:57 PM 
To; FarraJ-Feljoo, Ricardo; Yu, KanKan 
Cc: Ament, Douglas; Banks, Ai; Conklin, Judith 
Subject; RE: CIO SLA Process Feedback (COP) 


All, 

Attached are the documents that we reviewed in this morning^s meeting. 


« File: DRAFT, COP_Service_Lev€i_Agreement_9-10-15 vl.doc» 


« File: COP SLA Feedback 9-10-15.xlsx » 

Sicid 

« OLE Object: Picture {Device Independent Bitmap) » 

Stadan C 'Oaye 

Office of Strategic I mtiatiim/ 

Infonnation ^'ccfmHogy Senices 
sdaye^jbegav 

3 
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<Ffione: 202- 707-97SS 


From; Daye, Stacian C. 

Sent; Thursday, September 10, 2015 9:42 AM 
To; FarraJ-Feijoo, Ricardo 

Cc; Ament, Dougias; Banks, Al; Conklin, Judith; Najia, Dina; Yu, KanKan 
Subject: RE: CIO SLA Process Feedback (OOP) 


' > . t (Un ’ Ricanio, 

v\c .si I' -Lii!. s-n ii- Jnle to meet today. All of yotir questions and comments will bo roviowod and discussed 
dcr»nj; foda\’s ui. i fim;. An updated SLA document will also be distributed at the meeting. 


See you soon! 


Stud 

« OlE Object: Picture {Device Independent Bitmap) » 
Stacian C Oaye 
Ojjw ofStraUffic Initiatives/ 
iT^hrmation 'Tecfmohffy Seavk-es 
scfaye@Co c. ffov 
0ione: 202-}o7'-mS 


From: Farraj-Feijoo, Ricardo 
Sent: Thursday, September 10, 2015 9:03 AM 
To; Yu, KanKan; Najia, Dina; Daye, Stacian C 
Cc: Ament, Douglas 

Subject: RE: CIO SLA Process Feedback (COP) 


Are we still meeting today? We have not received any feedback regarding our initiai comments. 
Thanks, 

Ricardo 


From: Yu, KanKan 

Sent: Wednesday, September 09, 2015 12:25 PM 
To: Najia, Dina; Daye, Stacian C. 

Cc: Farraj-Fefjoo, Ricardo; Ament, Douglas 
Subject; RE: CIO SLA Process Feedback (COP) 


Dina, Stacian; 
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Are there any documents c^ssociated with this meeting other than the comment document and samples we sent in July? 

Thanks, 

Kan Kan 


-Originai Appointment 

From: Najia, Dina 

Sent: Thursday, September 03, 2015 8:52 AM 

To: Najia, Dina; Conklin, Judith; Banks, Ai; Daye, Stscian C.; Farraj-Feijoo, Ricardo; Yu, KanKan 
Cc: Ament, Douglas; David, Kimble A. 

Subject; CIO SLA Process Feedback (COP) 

When: Thursday, September 10, 2015 11:00 AM-11;30 AM (UTC-05:00) Eastern Time (US & Canada). 
Where: Judith’s (New) Office IM 630 


COP Feedback to CIO on SLA Process 


5 



375 


Ament, Douglas 


From: 

Banks, Ai 

Sent: 

Thursday, October 01, 2015 8:02 AM 

To: 

Ament, Douglas 

Cc: 

Christopher, David; Farraj-Feijoo, Ricardo 

Subject: 

Re: SLA for COP for signature 


No worries. We will have a completed document available soon. A1 


On Sep 30, 2015, at 3:34 PM, Ament, Douglas < dament@loc.gov> wrote: 

Nigel/AI, 

Prior to signature of any such document, the Office would require an appropriate USCO review. I'm not 
sure how other ITSC members feel but I personally do not feel I possess the appropriate authority to 
sign such a document on behalf of the Office. 

Doug 

From: Elmore, Nigel 

Sent: Tuesday, September 29, 2015 1:28 PM 
To; Ament, Douglas 

Cc; Barton, Bud; Conklin, Judith; Banks, Ai 
Subject: SLA for COP for signature 

Doug: 

Attached please find the Service level Agreement (SLA) between the Office of the CIO and the Copyright 
Office. 

Please print the document, then sign and date on the signature page (Section 6.0, page 14). Afterwards, 
please email Nige! Elmore fnelm@loc.govl that you have signed the SLA, and then deliver the physical 
signed copy to Cynthia Henthorn in LM-637 icvhe@lQC.eov : 7-1934], 

We need the signed documents returned by Wednesday, September 30, 2015, to meet the GAO 
implementation deadline. 

As was stated in the September !TSC meeting and as Judith Conklin (acting DCIO) has explained to each 
of you individually, OCIO realizes some service units have additional concerns, ail of which OCIO plans to 
address as soon as possible after the September 30th deadline. 

We appreciate you support and patience with this effort. 


Bernard Barton, Jr., CIO 
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From: 

Sent: 

To: 

Cc: 

Subject: 

Attachments: 


Yu, KanKan 

Monday, October 05, 2015 3:06 PM 
Daye, Stacian C. 

Farraj-Feijoo, Ricardo 
SIA Document 

RE: CIO SLA Process Feedback (COP) 


Stacian, 

For my organizationa! purposes, is there a more recent version of the SLA document since we iast spoke? S believe the 
last version you had sent me was from 9/10's meeting but i'rrs not sure if that was the same version that was distributed 
recently. If not, can you send me the latest? 

Thanks, 

KanKan 


Xan:Kan yu 

Copyright Technoiogy Office i U.S. Copyright Office 
library of Congress 
httD://www.coDvright.aov 
[202) 707-9263 
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Yu, KanKan 


From; 

Sent; 

To: 

Cc: 

Subject: 

Attachments: 


Dsye, Stacian C. 

Monday, October 05,. 2015 4:37 PM 
Yu, KanKan 

Farraj-Feijoo, Ricardo: Banks, Ai 
RE: SLA Document 

COP_ Service_Level_Agreement.9-29-2015.Final.doc 


KanKan, 


This is the most recent version that was sent out on 9/29/15 wfith the omission of the DRAFT watermark. 


SUtd 


■ r i IMURYOf 
(.ONtiRhS^ 
Stmtcsn C -Daye 


Uj^fics qJ Sir'ategtc fnitiatm^s/ 
Infvms.tion Q'ecRno{bg)i Smnces 
^.fnaiC' s daye@(^'.g ov 
<Pliomr202-?07-97SS 


From; Yu, KanKan 

Sent; Monday, October 05, 2015 3:06 PM 
To; Daye, Stacian C, 

Cc! Farraj'Feijoo, Ricardo 
Subject: SLA Document 

Stacian, 

For my organizational purposes, is there a more recent version of the SLA document since we last spoke? i beiieve the 
last version you had sent me was from 9/10's meeting but !'m not sure if that was the same version that was distributed 
recently, if not, can you send me the latest? 

Thanks, 

KanKan 


XanXan yu 

Copyright Technology Office } U.S. Copyright Office 

library of Congress 

httD',//ww w . c oDyrish t .«ov 

( 202 ) 707-9262 
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1,0 INTEODUCTION 


1.1 Overview of CIO 

The Chief Information Officer (CIO) ensures the effective delivery of information 
technology resources and services in support of the Library's mission, functions, and 
activities. The mission of CIO is to provide reliable and effective infomiation systems 
and telecommunications services to the Library in support of its efforts to serve Congress 
and the nation, manage and provide access to its collections, and plan, design, and 
implement systems that define the future digital library and information infrastructure. 

1.2 Scope of Agreement 

This is a Service Level Agreement (SLA) between CIO and the Library of Congress (LOC) 
United States Copyright Office (COP) for the period October 1, 2015 throsigh September 
30, 2016. The purpose of this SLA is to establish baseline support levels for Commodit}' IT 
services that are provided by CIO to COP. 


This SLA is binding upon CIO and COP. The CIO and COP may change this agreement 
when widespread service-affecting issues arise, new technologies develop, or 
requirements change. All modifications must be agreed upon by both the CIC) and COP. 
The CIO and COP agree to engage in good-faith efforts to resolve any problems which 
may arise. 

As needed and appropriate Memoranda of Agreement (MOUs) will establish support 
levels .for specialized CIO support not covered in this agreement. 


Note: In the interest oftiine, and the approaching September 30"' deadUtte, the Acting Deputy 
CIO and the SLA Project Team has requested that the SUs let tlie SLA document go forward and 
OCIO agreed to address all of Ok SUs concerns as soon as possible, after the September 30"' 
deadline. 


1.3 Assumptions 

This agreement relies on certain operational assumptions. Should any of these 
assumptions change, then the CIO and COP will negotiate and agree upon any necessary 
adjustments to this agreement. 

♦ Support levels established by this agreement will be provided. 

♦ All IT-related mandates, such as regulatory or Congressional, have been accounted 
for in this SL,A. 

1.4 Outside CIO's Control 

The services provided under this SLA may be temporarily suspended in part or in full by 
the CIO or other LCX2 or U.S. Government officials in the instance of unplanned, 
widesp.read, service-affecting issues. The services will be considered to be in "reduced 
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service mode" in the instance of service-affecting issues which render the entire LtXi 
enterprise unusable or severely degraded, these may include: 

♦ Certain Department of Homeland Security (DHS) alerts; 

♦ Severe weather or other natural occurrences like earthquakes, asteroid strikes, etc, 
which affect wide-area communication links, or utilit}' services or prevent 
technicians from reaching their workplaces; 

A Government shutdown, declared by the Office of Personnel Management; 

♦ Certain security tlireats and attacks; and, 

♦ Scheduled life & safety testing. 


Restoration of services covered under this SLA may be subject to factors outside of CIO's 
control. These may include vendor lead time (for purchases or vendor-provided repairs) 
and service provider lead time. 

Unless specifically stated othenvise, OCIO will pay the cost of the commodity level 
service offerings pending availability of funds. 

2,0 IT Services 


The services listed here are standard, meaning that these sendees are provided at no cost 
to COP. 

As noted by the Fed eral Information Technology Shared Services Strategy ', and the 
Federal IT Stared Services Implementation G uide -, there are three general categories of 
shared services in the Federal Government: commodity IT, support, and mission services, 
as described below: 


1. Commodity IT Seivices - As described in QMS Memorandum M-11-2 9.-'' 
examples of commodity !T shared services opportunities include: 

® IT infrastructure (e.g., data centers, networks, workstations, and core 
software); and , 

• Enterprise IT services (e.g., e-Mail, web infrastructure, collaboration tools, 
security, identity and access management). Commodity IT is asset-oriented, 
while enterprise IT services may, at times, be more utility-oriented (defined 
as purchasing by usage rate). 

2. Support Services - Are defined by the capabilities that support common business 
functions performed by nearly all Federal organizations. These include functional 


i evil i il 'lanritTs Hum 1 ochuolog^ Shared Ser\dces Strategic Office of Managemeut and Budget Office of E- 

n-’d intonniru'u ! cchnolog-. May 2, 2012 

I c. t' il L’f 5 1 'luou 1 edino’ivgv Shared Services Impkmentafion Guide, CIO Council, .\pn] B, iOi.y 
! I'i iiiuenu Ilf and Budget (OKfBj. M^rC29. Chief lafomiation o'ffice.t Aut'horUic'-, Vr ruM B ’ 
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areas such as budgeting, financial, human resources, asset, property, and acquisition 
management. 

3. Mission Services - 'Hrese are core purpose and functional capabilities of the Federal 
Government; such as disaster response, food safety, and national defense and 
employment services. Some Mission Services may have a single Federal organization 
focused on providing that service, while other mission services have multiple Federal 
organizations providing parts of a service. This may be due to statute, budget or other 
unk|ue capabilities an agency may' have developed. 

The scope of this SLA will cover Commodity IT Services. 
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3.0 Systems Mainte nance & Policy _ _ 

The following events may impact serv'ice availabilitvn 

> Planned maintenance windows - CIO is required to update and maintain the 

technical infrastructure on a regular basis per Maintenance Policy dated July 1, 2013. 
The agreed change windows for this work are: 

♦ Maintenance activity that is expected to take less than 4 hours will take 
place on the first and third Tuesday of each month beginning at 9:00pm 
Tuesday and ending by 3:00am on Wednesday; 

♦ Maintenance activity that is expected to take less than 12 hours to complete 
will take place on the second and fourth Sunday of each month beginning at 
6;00am and ending by 6:00pm the same day; 

♦ Maintenance activities will be suspended for certain periods during which 
maintenance may disrupt special events that require uninterrupted service, 
(e.g., when Congressional activities are in progress, the National Book 
Festival, End of Fiscal Year activities September 30*), The CIO and COP 
will identify these events and coordinate maintenance accordingly; and 

♦ Emergency system maintenance - From time to time critical maintenance, 
such as urgent security patches may need to be performed within business 
hours which may impact on serv'ice availability. Staff will be notified and 
all attempts will be made to minimize the business impact of the changes. 


Maintenance windows are not included in the availability column of the SLA. 


4.0 Roles a n d R esp onsibi lities 

4.1 The CIO RESPONsiBiLmEs 

CIO has the following general responsibilities under this agreement; 

♦ Conduct business in a courteous and professional manner with clients; 

♦ Meet response times associated with the priority' assigned to client issues; 

♦ Ensure staff are appropriately trained and currency of training is maintained; 
Maintain adequate escalation procedures with the Priority Matrix table; 

♦ Coordinate with COP on any maintenance that my impact the availability of COP 
systems even it it is during the maintenance -windows; 

♦ Log and track ail client requests for service through the Service Desk System 

♦ Maintain and keep current all offered services; 

♦ Provide proper communication and notice of changes in services; and 

♦ Monitor and track all SLAs and report out results. 
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4.2 The cop Besponsibilities 

COP tas the following geinerai responsibilities under this agreement: 

» Be familiar with the CIO policies and procedures for governing the acceptable use 
of information and communication technologies anti adhere to same; 

♦ Follow' appropriate notification and escalation procedures; 

♦ Maintain a service unit help desk that serves as the primary contact point for COP 
users. The help desk provides tier 1 and tier 2 IT support and only forwards to ITS 
Service Desk requests and incidents that involve infrastructure or issues that are 
beyond the scope of COP responsibiiit)-- 

♦ Determine appropriate support issue priority( P1-P6) in cooperation with the 
Service Desk; 

♦ Be willing and available to provide critical information within 4 hours of logging a 
request with the Service Desk for any urgent matters. 

♦ Notify the CIO Office of COP business changes that impact the relevance of SLAs. 


4.3 ESCALATION PATH 


It is important to the success of the relationship between OCIO and COP that both parties 
understand the escalation chain in the event that there is an SLA Breach, or a reported 
Service Incident, and agreement cannot be reached as to the root cause or resolution. The 
following escalation path should be followed: 

1. Office of the Chief Information Officer, Deputy Chief Information Officer (DCIO) 

2. Office of the Chief Information Officer (OCIO), Chief Information Officer (CIO) 

3. Chief Operating Officer (COO) 


12 I 
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5,f> TfRi'iDH Rt \ II vv P r ocess _ 

n n'- Cl -X i'. a mi-'cailv endorsed document and wiU be periodicaliy reviewed and 
chdiigeG he.' U'e following events occur: 

♦ The technoiogica! capability has been drastically reduced. 

♦ Funds availability has been drastically changed. 

♦ UnschediiSed service disruptions have greatly altered information syestem processes, 

ThLs Service Level Agreement will be reviewed semi-annually in fi.scal 2016 and aniitially 
thereafter to capture any expected changes in commodity IT service offerings and service 
levels. Contents of this document may be amended as required, provided mutuai 
agreement is obtained and communicated to all affected parties. The Document Owner 
will incorporate all subsequent revisions and obtain mutual agreements / approvals as 
required. 

Document Owner: OCIO 

Review Period: October 1, 2015 - September 30, 2016 
Previous Review Date: N/A 
Next Review Date: 
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Bernard Barton Ir. 


Name 


OCIO/CIO - use Chair 


Title 


Sieiiature 


Date 


Name 


COP/USC Member 


Title 


Signature 


Date 


14 1 p a L 
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Appendix A: Definitions, Abbreviations, and Acronyms 


Access Management 

The proems responsible for allowing users to make use of IT' services, 
data or other assets. Access management helps to protect the 
confidentiality^ integrity and a%'ailabiiity of assets by ensuring that only 
authorized users are able to access or modify them. 

Asset 

Any resource or capability. The assets of a service provider include 
anything that could contribute to the delivery of a service. Assets can be 
one of tire following types: management organization, process, 
knowledge, people, information, applications, infrastructure or 
financial capital. 

Audio & Video 
Teleconferencing (VTC) 

Audio & Video Teleconferencing Conferencing services provides 
technology and support to aid in the presentation and C(3inmumcation 
of relevant content and information to Library staff, and special events 
during normal business hours. 

Availability 

Availabilit}' of an IT service is determined by reliability, 
ma.i.ntainabiiit)', serviceability, performance and security. Availability is 
usually calculated as a percentage. This calculation is often based on 
agreed service Hme and downtime. 

Commodity IT 

Core services which include: IT infrastructure (e.g., data centers, 
networks, workstations, and software applications,); and 

Enterprise IT services (e.g., e-Mail, web infrastructure, collaboration 
tools, security, identity and access management). Commodity IT is 
asset-oriented, while enterprise IT services may, at times, be more 
utilitv-oriented (defined as purchasing by usage rate). 

Congress 

Where an incident or ta.sk affects any congres-sional web site hosted on 
or in development by a LC system or team. 

Database 

Administration 

Supports library databases/ database applications by developing 
architecture, establishing standards, monitoring, managing, and 
addressing security related issues to databases. 

Desktop Computing 

This service provides support services for workstations and connected 
peripherals. Including print services wMch enable all computers 
connected to the LOC network, including staff laptops connected 
wirelessly, to print to large multi-function devices and small desktop 
printers. 

DHS 

Department of Homeland Security 

Division/ Office 

Where an affected system or service supports a building/ floor/ partial, 
floor/ division/office. 

Email 

Enterprise email supporting internal, employee to employ’ee(s), or 
external, employee to customer, vendors, or bu.siness partners. 

Enhanced users 

A small number of SU users, which have been pemiitted enhanced service 
due to their criticai roles in the or^anizafion. 

Enterprise 

Where an incident or task affects a maiority of Library users. 


ISIPaaa 
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Fulfillment Group 

The assigned team for Service Request 

Hosting Services 

This service provides support services inloiniU ‘c v' 
comprising of the following: 

« Application 

* Database 
® Server 

* Storage 

* Infrastructure 

Impact 

impact is a measure of the extent of perceived effect to systems or 
users and the potential damage to the organization before the 
incident or ticket is resolved. 

Individual 

Where the requestor is a single user. 

Information Security 
Management 

Tills service provides the protection of the Library information and 
inh)rmation structure assets against the risk of loss, misuse, disdosure 
or damage. Develops, implements, and manages the controls that 
ensure diat die Library is managing these risks. 

Internet (ISF) 

Services provide secure network connectivitv to tire Internet. 

LOC 

Library of Congress 

Messaging & 
Collaboration 

This service provides tools and capabilities that allow users to 
communicate and collaborate. This includes systems such as (e.g., 
SharePoint, Instant Messaging and GroupWise) . 

Mission Services 

Mission Services are core purpose and functional capabilities of tiie 
Federal Government; such as disaster response, food safety, and 
national defense and employment services. Some Mission Services may 
have a .single Federal organization focmsed on providing that service, 
while ofter mission services have multiple Federal organizations 
providing parts of a service. This may be due to statute, budget or oBier 
unique capabilities an agency may have developed. 

Mobile Devices 

Devices such as iPhones, Androids, and tablets. These devices 
will be either validated (meets security requirements and has 
undergone the assurance process defined by IT Security) or non- 
validated (does not meet the securitj? requirements and/or has 
not undergone the assurance process defined by IT Security). 

MOU 

Memorandum of Understanding - A MOU is a formal agreement 
between the CIO and a SU. MOUs shall be used by the CIO as follow- 
on documents to the baseline SLA for the purpose of defining new or 
expanded services which are either not defined within the baseline SLA 
or which need to be redefined. 

■Non - Routine Tasks 

Consists of long term tasks that are not Projects and are not routing 
tasks which may require 1 to 6 months to complete. 

Normal Business 

Hours 

The time period when a particular IT service is available from the OCIO 
Service Desk. Services will be provided between the hours of 7:00 a.m. 
and 5;(X) p.m., Monday through Friday. (*Note: See Semce Desk) 

CIO 

Chief Information Officer - CIO ensures tile effective delivery of 
information technology resources and services in support of the 

Library' s mission, functions, and activities. 

16 1 p a q e 
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f he measure of response expected from a i sh 

management team. Allowed response times aie niv. 
hours and days. 

PI 

Priority 1- During a PI incident die CIO wdh \\ itii! l * ni-ru res, ' 

mobilize the resources required to work the mLideol M uic ■ ni v. 

be informed and a PAO Announcement ma\ begentiekd md 
delivered to the Public Affairs Office for distnbufon W iihm ! 
working hours the CIO will resolve the incident. 

P2 

During a P2 incident die CIO will, within 30 mmutes mobO (he 

resources required to work the incident Management is lO be bii*'* it>>- i 
and a PAO Announcement may be generated and deliv eie».l ‘ tiu 

Public Affairs Office for distribution. Within 8 n oikmg iiouis bv’ Cii 
will resolve die incident. 

Enhanced User Service Requeste will be assigned a P2 priority. HTiere 
an Enhanced User request is added to a Fulfillment Group queue the 
request will be treated as first in queue and fulfilled with the least 
delay. 

P3 

Routine requests will be assigned this priority level except for 

Enhanced User requests. P3 requests will be placed in queue and 
fulfilled in turn (FIFO) by a Fulfillment Group(s). The Fulfillment 
Group(s) will respond to the request within 4 working hours and 
resolve fhe request within 5 days. 

Use tliis priority where an incident has occurred which does not have 
an immediate operational impact or where a workaround is available to 
the user. 

P4 

A low priority reque.st that does not immediately impact the ability for 
a person or team to complete their assigned tasks. P4 requests will be 
acknowledged within one day and will be resolved within 10 business 
days. 

P5 

Assign requests received from Project Teams to this category. Tlie 

Project Team will establish the maximum time for fulfillment wifli the 
Fulfillment Group (s). The Fulfillment Group (s) will have 8 working 
hours to review the request and respond to the Project Team and 30 
days to resolve the request. WCC Change Request Foims (CRF) for 
software and hardware will be assigned to this priority . All requests 
will be fulfilled by the requested or agreed inK)n date. 

P6 

Non-routine tasks which have extended completion times will be 
a.ssigned this priority. 

Priority Matrix 

The Priority Matrix establishes categories of urgency and acceptable 
re.sponse times for a given incident or Service Request. 

Processes 

Routine Service Requests which require multiple steps or an extended 
period to fulfill which do not directly affect a specific user. An example 
would include a change request for softwrare to be approved which 
requires an extended amount of time to fulfill due to the number of 
steps and groups involved. 

Project Support Tasks 

Service Requests originating from a Project Team. To be used 
where a Project Team requires support from a Fulfillment Group i 


17jP a ci 
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('iUside the Project Team. 

Public 

IVhere the system or service is commonly available to the general 
public. 

Resolution 'lime 

The measure of time an incident or ^rvice Request can remain in a 
jion-resolved status before an SLA Breach occurs. 

Response Tin\e 

How long a Fulfillment Group or incident management team has 
to review a ticket and provide a response. 

Service 

A means of delivering value to customers by facilitating outcomes 
customers want to achieve without the ownership of specific costs and 
risks. 

Service Desk 

The single point of contact between the service provider and the users. 

The Help C^k will answer phone calls and email from our LC End 
Users, 24 hours a day, and 363 days a year, to open In^ubie tickets. 'Fhe 
Help Desk is dosed on the two holidays July 4th and Christmas. Work 
on tickete opened after hours and on weekends or Irolidays will begin 
at 7:00 AM the next business dav. 

Service Desk Catalogue 

A structured document with information about all live IT' services, 
including those available for deployment. The service catalogue is part 
of the service portfolio and contains information about two type of IT 
service: customer-facing services tliat are visible to the SUs; and 
supporting services required by the service pro\dder to deliver 
customer-facing services. 

Service Level 

Agreement (SL,A) 

An SLA is a document that establishes an agreement between an IT 
service provider and a client to describe IT services, specify the 
responsibilities of both partie-s, and document the expected service- 
level targets. 

ST..A Breach 

E^xceeding the maximuni rime frame required for the effective respoitse or 
the timefmme required for the ticker, solution in accordance with the terms 
and level of tlie ticket solution in compliance with its categorization in the 
l^rioritv Matrix, 

Service Level Targets 

(Si;r) 

Service Level Targets (SLT) - SLTs are event-driven performance 
criteria which give context to measures and provide a mathematical 
basis to understand organizational performance. 

Service Request 

A request for a routine service ha.s been submitted and will be routed to 
a Fulfillment Group for action. There are no users or systems 
experiencing an incident. 

Service Unit (SU) 

Library .support business unit. 

Signilicance 

A term used to identify the different priority levels as a measure of 
importance to the organization. 

Support Services 

Support services are defined by the capabilities tliat support common 
business functions performed by nearly all Federal organizations. 

These include hmctional areas such as budgeting, financial, human 
resources, asset, and properh' and acquisition management. 

Telecommunications 

This service provides solutions that support tire LOG 
telecommunications needs. This includes the following: 

• Voice: Support for telephony tools, hardware, sofhvare, and voice 
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kic.ia infrasti'uclnre 

• Data: Support for tools, hardware, and infrastructure that supports 
data transmission. 

* Faciiiti^: Oversi^t support for the Library data center, to include 
power, location, and cabling. 

Telework/COOP- 

Laptops 

This service provides support for an employee to perform work, during 
any part of regular, paid hours, at an approved alternate worksite (e.g. 
home or telework center). 

Urgency 

The categorization of how quickly an incident or ticket needs to be 
resolved. 

Wireless 

Services provide secure network connectivity to the LOC wireless 
network for staff and the general public. 

In Building Wireless: The cellular network within the confines of 
LOC buildings providing staff and visitors access to external 
cellular carrier networks, both data and voice. 

Wi-Fi; The LOC wireless local area network offered to staff and 
visitors to provide data connectivity to the internet. LOC Guest is 
the current LOC Wi-Fi. 

Work Degradation 

Where an IT system continues to be useable but performs below normal 
operating levels. A system may be slow to respond to user requests or 
part of a system may fail entirely with other parts continuing to 
function. 

Work Stoppage 

A.n interruption of IT services or access to one or more systems which 
results in one or more users not being able to perform rou tine assigned 
tasks which they are normallv able to perform. 
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Curtiss, Dan 

From: 

Curtiss, Dan 

Sent: 

Wednesday, October 28, 2015 1:00 PM 

To: 

Banks, Ai 

Cc: 

Curtiss, Dan 

Subject: 

SLA example 


I 3 guy who does iT over at one of the USDA agencies. I asked him about SLAs and who the Library 
■nt the foHowing contact that you can call to get a copy of their SLA and maybe some lessons learned. 

^1.1, r M Pi. on 
I sw\ X^hllSMRPBS 
I n > ! Operaiions 

i M tc t Lv.li Support Services 
Icwm Siipervi.sor 
iOO Nuph Sixth Street 
Suite 610C room 6VV-02 
Buller Square Biuidiim 
M.:in.neapohs. MN 00403 
Stoll M PUeisjir ( iph nsd^ij^ov 
6i: ^Rv3376(Woik) 

612-702-6175(Cel!) 


Daniel Curtiss - Chief, Technical Operations 

Copyright Technology Office 

Desk 202-707-001S 

Mobile 202-297-3841 

dcuf tiss@ioc.Kov 

w ww -c oDvright.Kov 
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Ament, Douglas 


From: 

Ament, Douglas 

Sent: 

Wednesday, August 10, 2016 12:08 PM 

To: 

Barton, Bud 

Subject: 

Latest Draft SLA - 081016 

Attachments: 

Copyright SLA Redline 2016.8.10.doo< 

Bud. 



Please find attached the latest draft SLA which includes Copyright Office edits for your review. The “Redline” 
version clearly shows all of our proposed edits which hopefully makes it a little easier to review. Let me know 
if you have any questions. 

Thanks, 

Doug 

(Doughs Jlment 

Chief Information Officer, VS Copyrigfit Office 
101 Independence jtve, S'£, LM-403 
‘WasHington, <DC 20540 
202-707-5440 -Office 
202-413-4656 -‘MoBife 
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Service Level Agreement 

(SLA) 

BETWEEN 

THE UNITED STATES COPYRIGHT OFFICE (COP) 
AND 

the Library Of Congk^, Office of iriE CHIEF 
INFORMATION OFFICER (GJOOOO) 

For the period [October 1, 2015 - September 30, 2016] 
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P \ 1 N ) >'•< 

\ND Al'PROVAtS 



■ , 



0,1 - nM-t.'i’ - v.tO 1 hjjlial drat ; 


' f'JO 

RrvisioBssn^«le<j}>ylnteiciej OO 

oj 

t;ro 

RcvjslOii.'i J?y D^uty OO A SCJs ; 


l JO 

OcpBiy CIO, aad SUs. j 

it, 5 s^a'is 

1 CIO 

Reviaons safKesfwi intoim CIO, 

Depmv OO, baMd cm qaestisns asd i 

romniCTls subiDitt«i fey SU aftra their i 

tevtew of the Draft SIA dncusnest 

ii.6 ■ .VSy-l-? 

, CiO 

Revisittas aiggcswd by DepotyClO- 

' 0.7 ■ 


Rcrisjoas st^csted fey D^nty CIO A SUs. ) 

t,0 ^ <V2^n5 

! CIO 

Aw^oveaSeyj^a^^estedbvOOO i 

u ; 

: £S& 

Kf virioas suggested bv COP 


• Dckumi-'N't Approvals 


, . .. 

telsLi.Ms 



; BernanJ flarton Jr. 

; I’fojec! .Spijnwr i 

Apjwved 

i : 

> jtidltb O.iuhlhi 

; ft'Ci|ea S{H)nst>r ; 

Approved 

i »i^5 ; 

.M 

; Respon.sjfetc Manager ! 

Approvi-d 

i 8*WS ; 
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•> ’ 111 ! I * (<'IO) ensures the effectiv'e deijverv' of information 

I 1 SI > s si’i . uos in support of the Library’s mission, functions, and 
\ ii iS'i .< !t> .s to provide reiiable and effective information systems 
■* >. r ni lilt s v'l \ .< es to the l.ib,rar\- in support of its efforts to ser\'e Congress 

111 M a ( j i id pun ide access to its colJections, and pian, design, and 

I -'V i a” ‘ .<1 ti ‘f n< the future digital Ubrar}' and information infrastructure. 

1-2 Scxjpr-: OF AiXiFi-viTM- 

I ins a x‘i% uc 1 c\,(‘> V'j-xmn-nt {SI \) behveen CIO and the Librar>' of Congress (LOC) 
L.nUi;!,! btatc-s Copcriglu (..'IIko (COP) for the period [October 1, 2015 through September 
30. 2(.!.it>r|. \ lie pm po.se of this Si,A is to establish baseline support levels for Commodih' 

I I .scTVK'es liiat are proc imfo bn' <.'IO to COP. 

This K is hi uii upon CK.) and COP. 'Hie CIO and COP may change this agreement 
when vMdespuad servKe-afi’ecting issues arise, when new technologies d e velop are 
adopt ed 01 lequiri. rn tvs change. All modifications must be agreed upon by both the 
CIO and i.,.OP, Uie LiO and (''OF agree to engage in good-faith efforts to resolve any 
problems wtucli may arise. 


As needed and appronriate , separate Memoranda of A g retanon t Understanding (MOUs) 
will establish support levels for specialized CIO support not covered in this agreement; 



1.5 ASSUMPnONS 


I liis agreement relies on certain opei'abonal assumptions. Should any of these 
assumptions change, then the CK.) and COP will negotiate and agree upon any necessar}' 
cU'.i.ju,stmenls to this ag^reement. 

4 Support .Ie>vei.s e.'.ilab.ij,shed by this agreement will be provided. 

* AM 1 1. -related mandates, such as regulator)' or Congre.ssionai, have been accounted 
for in thi,sSLA. 
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SERVS^E tEVEt AGREESKiT 



.iT ^ f fhis A n\av be teniporanly suspended in part or in full by 
..’C. oi’ Government officials in the instance of unplanned, 
(. > 'vsoo The seivices will be considered to be in "reduced 

t iisian^f oi sen-'ve-affecting issues which render the entire LOC 
j j '1. V H l\ d» graJ these may include: 
f iti.t r i lometani Securitj’ (DHS) alerts; 
i< < d-' r natural occurrences like earthquakes, asteroid strikes, etc. 

t v\iJ( r e ^on•iml^nication links, or utilirt’ ser\dces or prevent 
rri:)n! reacning tfiejr workplaces; 

’ll siiutdown, declared b\' the Office of Personnel Management; 


' t rLi I St-* I h l. f ils tnd atta* ks; and, 
» bciu'i.iule<.l lii'c cc Suix'iv tesnnsc 


Restoration of services covered under this SLA may be subj«:tto factors outside of the 
tnO's control These ma\' include vendor lead time (for purchases or vendor-provided 
repair,?) and service provider lead time. 

Unless specifically stated otherwise, OCdO will pay the cost of the commodity level 
service offerings pending avaiiabslity of funds. 

2.0 IT' Services 


The services listed here are standard, .n\eaning that these services are provided at no cost 
to COP. 

As noted by the Fedem l. In formation Technology Shared Services Strategy ’’, and the 
Federal fl Shared S<;Mviccs Implementation Guide ^. there are three general categories of 
sharc^d seivices in the !-ederal Government: commodity IT, support, and mission, services, 
cis descrilxid below: 

1. Commodity IT Services - As described in OMB Memorandum M-11-29. ^ 
exjunpies of cojnmod.ity IT shared services opportunities iitclude; 

• .IT infrastructure (e.g., data centers, nrtworks, workstations, and core 
software); and , 

• Enterprise IT .services (e.g., e-Maij cmail, web infrastructure, collaboration, 
tools, security, identity and accf^ss management). Commodity- .IT is asset- 


’ '{■ccicnvl Infi:) 

(, Mrnin i 

lull VV\NV V 




> ‘Mun.M Smisxii.Stfatcgi', tlfBcc of MaiMBwncnraiKt Ii\idact fOMIl), Office of fc 
) Kx'nol 4,1 \U\-2.2M.2 

..i*^lClU.da 'Vuil/l.ilcy/iimb/«Mi:g/eRm- tliKS.'sharcJ a aviecs .Wfutggy.tyif 
< n Sii if4\i '•V \iccs linpIc.-mcEiarion Chiidc, CK.) <k>URcil, April B. 2(11.1 


M.nL22. c:hkf inf<m 


■n Oflittt /lotlvwuiiai, ,\ugusf S. 201 1 


gjPaag 
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_ SgRVKiS ISVELAG REeMENT _ 

itirpsise IT sei%’ices may, at times, l?e more ’utiliry-oriented 
-> [ u by usage rate). 

's ' ’■t Jeilned by tbe capabilities that support common business 

1 ! \ fti i\ ail Federal organizations. These include tunctional 

cial, human resources, asset, propert)', and acquisition 



C4-S ! be >j<. c re core purpose and functionai capabilities of the Federal 
■esponse, food safety, and natior^l defense and 
K “X > Mission Sendees may have a single Federal organization 
St h t se vice, x^’hile other mission services have multiple Federal 
of a serv'ice. This may be due to statute, budget or other 
I m g** "! v may have developed. 


Ihesioot. ol ih 


wd.l-ef>veyis limited to Commodity IT Services. 


3 I P a<a e 
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Ci-Ji, SSfsVlCE t-SveL AGREEHSMT 


\ ' J 

\ \ Ip ( s service avallabiiin-: 

1 I vindows - CIO is r&iuired to update and maintain the 

‘guiar basis per Maintenance Policy dated July L 2013. 
Dr this work are: 


5 1 ut i I V itv lltat is expected to teke less than 4 hours will take 
1 third Tuesday of each month beginning at 9;(Xjpm 
: liCrOiiN- iTuiiog hy 3:00am On Wednesday; 

♦ N’ln wrtf uU\ tv that is expected to take less than 12 hours to complete 
w'tii taKc Piace on the second and fourth Sunday of each month beginning at 

by 6:<X)pm the same day; 

♦ Maintenance activities will suspended for certain periods during which 
maintenance may di.srupt special events that require uninterrupted service, 
(e.g., when Congressional activities are in progress, the National Book 
Festival End of ihsca! Year activities September 30**’). The CIO and COP 
will idenbfy these events and coordinate maintenance accordingly: and 

♦ E:merge.ncy system maintenance - From time to time critical maintenance, 
such as urgent security patches may need to be performed within business 
hours w'hich may impact on sendee availability'. Staff will be notified and. 
all attesn pts w.ill be .made to .minimize Jhe business impact of ihe changes. 

Miuntenance windows are not included in the availability column of the SLA. 

4.0 Roles AND RESPO NsmiLmES 

4.1 TtiHCi'O RES.PONS)BiLiT.5}-S 

CIO has the foilow.ln.g general responsibilities under th.is agreement: 

♦ Cof\duct business i.Tt a t:ourteoijs and professional manner with clients; 

♦ .Meet response tinxes associale<l with the priority assigned to client issues; 

♦ Ensvire .staff are appropriately trained a.nd currency of training is maintained; 

♦ M:aintein adequate esca.iation prcK:e‘d»res witfi Uxe Priority Matrix table; 

4 Coordinate with COP on any maintenance that my impact the avaUability of COP 
sy'stems even if it is during the maintenatvee windows; 

♦ Log and track all client ftxiuests for service through the Service Desk System 

♦ Maintain and keep t:ur.rent ail offered services; 

4 Provide proper conrmunication and notice of changes in services; and 

4 Monitor and track a.!.! SL.^s and report out results. 

• - - 
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SERVIOS LEvaAORESMENT 


1 t t r4 ' lesponsibilities under diis agreement: 

1 i iT ’ - policies and procedures for governing the accepJable ase 

i \ ic nmunication tahnologies and adhere to same; 

Ik lO Ml k m ’i'lLiition and escalation procedures; 

Sifiot hosmcss, or mission systems sercdce unit help desk that ser^'es 
- -1 1 m ' o 1 1 n< int for COP users. The help desk sperifically provides 

iK-r 1 -anti-her ^44- mss » on systems specific support and-ofdy forvi'ards to ITS 
k i> >' s v. ift. sK a 1 incidents that involve infrastructure or issues that are 
\t I d {->( < X oi C >.)P responsibility . This arrangement does not preclude 

I...OP users from directly requesting infrastirucmre support from the ITS Service 
Desk. 

Deiero'dne approprijiU* siipport issue priori^'f jPl-P6) in cooperation with the 
Seivice Desk; 

Be willing and available to provide critical information within 4 hours of logging a 
request with th.r' Service Desk for any urgent matters. 

Nolif)' lI'ic'CK) Offic e of COP business changes thatim|?act the relevance of SLAs. 


4.3 ESC.AI.AT50N PATH 

I it S.S jmportarst to the sut:cess of the relationship betwee n tiie CXTO and COP that both 
parties under-stand the escaiation chain in the event that there is an SLA Breach, ora 
reported St^rvice inciderU, and agreement cannot be reached as to the root cause or 
resolution. The foHowing escalation path should be followed: 

1. C.)ffjce of tire Chief Information Officer, Deputy Chief Information Officer (iXlIO) 

2. Office of the Chief Information Officer (CXlloj, Chief Information Officer (CIO) 

3. Chief Oj,H*rating Ofticer (COO) 
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SSfViCE tevEL AGREESSNl 


» “ i-HUVh ' ^<‘'.rMKlRS _™_„ 

I ' uuv' .'.•'I'o's. d aocuraentaad will be periodically reviewed and 
^ is ‘ 1 'i 1 u\Mn,i e\entsotvur: 
i- c p-'li. ’1 1 epabilih h been dfasHcaUy reduced. 

I ' I < " 1 nlviO'i,-' nd<i b< c" d.ashi,al{y changed. 

» !‘-oi 'u !>' d V 1 ' 1 ' t. have greatly altered information system procrsses. 

'!-> 'V (( 'oi v\ ill i>e reviewed semi-annually in fiscal 2016 and annually 

iKt c’lb j !■) I n ■’lU.e rim <. pc icd hanges m commodiri IT service offerings and service 
i ievch. in addition, the SI A will be reviewed and chanffld as needed to account for and 
I accommo date Co pyright Office modernization efforts, as discus.sed in Appendix E. 
v,oiu«::nr.s of thcs tioctn'.ietit may l.>e amended as required, provided anutual agreement is 
oot. mod md '.nauaunu d to all afhxted parties. Tb^e Document Owmer will 
incorpof atc a.U substxpjent revisions and obtain mutual agreemente / approvals as 
lequired- 

Document Owner: OCIO 

I Review Period: [October 1, 2015 - September 30, 25161 
Previous Review Date; N/A 
Next Review Date; 
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6.0 Signatures 


oao/cio - use a^air 

NcISiK- 

Titie 

Sigiuiture 

Date 


COP/rrSC Member 

X'amo 

Title 

SignalTirt' 

Date 


1 4 [ P a a e 
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Appendix A: DEHNrriONS, Abbreviations^ and Acronyms 


L__ 



The prtxtoss responsible for allowiiig users to make use of IT services, *t 
oata or other assets. Access management helps to protect the ] 

contidenLial’tv- integrity and availability' of assete by ensuring that only j 
authc'n/.ed users are able to access or modiri’ them. i 

•• i 

•Anv resource or capability. The assets of a serv'ice provider include 
HTivihing thiit could Contribute to the delivery of a service. .Assets can be ! 

m ot -h.. tollowmg types; management organisation, process, 
•Knowledge, people, information,, applications, infra-structure or 
finanaal capital- i 

}■ Audio V’ideo 
> Toii’coiiferciivij’.g (VK..1 

Audu' & Video Teleconferencing Conferencing ser\'ices provides 
technology and support to aid in the presentation and cornmunication i 
ot relevant content and infoimation to Library shiff, and special events j 
during normal busine^ hours. ! 

Ij Avstilabi'lity 

Avivilalishty ot an IT scrv'ice is determined by reliability, | 

maintamabshly, serviceabilit)', performance and security. AvailabOity is j 
usually calculated as a percentage. This calculation is often based on j 

agreed .service hrne and downtime. ; 

|| Commodity IT 

Core services which include; FT infrastructure (e-g., data centers, : 

m tv^^>rks V. orkstations. and software appHostions,}; and 

Bnterp.ns»i IT .services (e.g., e-MaiJ, web infrastructure, collaboration 
tools, security, identity and access management). Commodity IT is 
assttt'Dnenh'd, while enterprise IT services may, at times, be more 
utility -onented (defined as purchasing bv usage rate). 

t;k;tngTess 

VV hers? an vncident or task affects any congressional web site hoshxl on 
or in dev(?lopment bv a LC system or team. 

Is Database 
f Adtnii^istrahon 

j Desktop cornputmji 

j - - 

Supports Library databases/database applications by developing ! 

architecture, establishing standards, monitoring, managing, ami i 

addnwsjng sixunfv reUtted issues to databases. i 

ihis s<.?rvKe provides support services for worfc.stalion.s and connected { 
peiipherats. Induding pnnt services whicli enable all computers i 

i, onnedito to the Lv)C., network, including staff laptops conr«;*fte<3 i 

wireiesslv, to print to large muld-function devices and snt<Ul desktop { 
printers. | 

p^IIS 

1 [.)ivisi03i/ Otiice 

1 i;:, ma.il 

Ltefwrtment ot Momelaml Securih’ 1 

VMiere an afh-Dcxl system or service supports a building/ floor/partial 1 
fkxMv division/oltice. j 

bnteipnsK email supporting internal, employee to einployee{s), or 1 

exicnwl, employee to customer, vendors, or business partners. j 

hiihanced users 

•A Mrrnli auinricr ot SL' users, which have been jxirmitted enhanced sen'ice | 
iHie so thcit critscai roic.s in the onsnixarion. i 

1 hnterpnse i VV here an »Kidej\t or task affects a majoritv' of Library' users. j 
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i L U 1 1_ ■ 


maiiairenient team". 


This service provides aipport services internal to LOC envinsnment 
comprising of the following: 

• Application 

• Sen'or 

• ! '•> s'-U^tUH 


Im pact IS rt 1 leasure of the extent of perceived effect to systems or 
users and tne potential damage to the organization before the 

1 t> ich It r hx ket is resolved. 

K ’" lit n ‘'s Hi t- 
Manairemenl: 

ivhea’ the reauestor isa single user. 

( h)s sen-’ice provioes the protection of the Librarv’ information and 
inforrnatKin structure assets against the risk of loss, misuse, disclosure 
or damav'e. IXivelops- implements, and manages the controls thai 
ensure that ihe Ljbrarv is managing these risks. 

inteniei i^ISFi 

b(-nvjc:e.s pnwide secure network connectivitv to the internet. 

I.UC..: 

Librarv t>f Congress 

MessasiTij!’ ite- 
t-..o.!ia!xira'bon 

1 his .service provides tools and capabilities that allow users to 
cotTimumcah! tuid collajxjrate. This includis sy.stems such as {e.g., 
ShareP<Mnt. Instant Messaging and GroupWise). 


Mission fnnvices are core purpose and functional capabilities of the 
federal Government; such as disaster re.sponse, food safety, and 
national defense i-ind emplovTnent services. Some Mission Services may 
have rt single feiieral organization focused on providing that service, 
w.iuk> other mi-ssion services have multiple Federal organizations 
providing parts of a .service. This may be due to statute, budget or other 
unique capabilities an agenc\^ mav have developed. 

Mobile Din’ices 

Devices such a.s iPhones, Androids, and tablets. These devices 
will ht! either validated (meets security requirements and has 
undergone the assurance process defined by IT Security) or non- 
vahdah*d (does not meet the security requirements and/or has 
not undergrvnc the assurance process defined by IT Securily). 

MOII 

Memorancium of Understanding - A MOU is a formal agi'eement 
between the t'iO ami a SU. MOUs shall be used by the QO as follow- 
on dixruments to the baseline SLA for the purpose of defining new <ir 
cxpaoiUxi .st-rvices which are either not defin^ within the baselirni SLA 
or which netxl to bt; redefined. 

Non - Routine Tasks 

(..oiisists ot long term task.s that are not Projects and are not routing 
tasks vi'hKh may require 1 to 6 months to complete. 

Normal Business 
flours 

CIO 

1 he tirtU'.' period when a particular IT service is available from the GOO 
k.ui V rXsk be provided between the hour.sof7:{X)a.m. 

and o.lX) p.m., .Mondav throu^ Fiidav. EST. f’Note- See Senna Desk) 
information Otticer - CIO ensures the effective delivery of 
intonnahon technologv resources and services in supixirt of the 
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ity 

! c ir<'«-urx ^ * r<. spouse expected from a FuifUment Group or incident 1 
Ji‘i i’ mtUtteam. AOovved response times are measured in ntimites, 

1< i 1 iHt U..%s 


f'rior!l%' 1- Dunnga PI incident the CIO will, mlhin 15 minutes, 

the resx'urccs required to work the incident. Management will j 
i! irr)ti,j Oiia a PAO Announcement may he generated and 
l> h 1 rea to hi Public Affairs Office for distribution. Wjthin4 
woi km}' hours the CIO will resolve the indd<mt. 


i iuniig a P2 inciuent the CIO wfll, within 30 minutes, mobilize thc' : 

resviurces required to work the mcldent. Management wUl he informed | 

/ d P 30 Announcement may be generated and delivered to the 

1 'uDiic .Atlatrs Ottsce fcH" distribuuon. Vvithin 8 working hours the CIO 
wi.ll resolve tne incident 

! ih,,trH>.vt LserSon-'ice Requestswill beassignedaP2 priority. 13Tiere 

1 f thaiH ed 1 ser request is added to a Fuifillment Group queue the 
reqiii>st wut be treated 3.s first in queue and fulfilled with the least 
delav. 

1 1 re 

1 

i 

Routnie fequ»?sts wall be assigned this priority' level except for 

Cnhaiici'd User requests, .re requests will be placed in queue and 
tuttilk'd in turn (FIFO) by a Fulfillment Group(s). The Fuifillment 
(..roupfs) will respond to the request within 4 working hours and s 

.resolve thc ix^quest within 5 days. ' 

Ljse this pnontv wliere an incident has occurred which does not have 
m immedurte op»?rationaI impact or where a workaround is available to j 
the usi‘r. S 

1| P4 

A low ]?.nontv request that does not immediately impact the ability for 1 
a ];Hirs<.m or team to complete their assigned tasl^. P4 requests wiii be 1 
ac.kn('wjodgt\i within one day and will be resolved within 10 business j 
davs, 1 

■i'^5 

\sMgn tcquests received from Project Teams to this category. The ! 

Pronx't Team will «'-sdablish the maximum time for fulfiUment with tht; j 
f u.l}iHment Group (s). The Fulfillment Group (s) will have 8 working j 
hi,»u.rs to review the nx^ucst and respond to the Project Team and 30 j 

J<^v^ {oTcsoh<> ttu* rcijiiest. WCC Change Recpiest Forms (CRF) for i 

.sorrware iind hardware will I'le assigned to this priority. All Ktquests | 
wi.ll be .tultilled by the wxtuested or agreed upon date. 

11 P6 

1 

Non-roufcme tasks have extended completion times w ill lie 

assigned thrs p.no.niv, 

j PiU)nr\ \Ultix 

1 iu’ Pnxinty Matrix establishes categories of urgency and acceptable 
respon-se tunes for a jriven incident or Service Requwt. ; 

PlOti-SSf, 

[ r’r^ijeci. bupj|>i.ri'{ Tasks 

Houtine .St^rvice Requests which require .tnuWple steps or an extcndeci 1 
[Tcnod to tultrli which do not directly affect a specific user. An example 1 
would rndude a change request for software to be approved which } 

r>;'qu.ire8 an extended amount of time to fulfill due to the number of j 

steps and gri;>up.s involved, S 

f^rvice Requ(>.sts originating from a Project Team. To he used 1 
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. where a Project Teaai requires supportfrom a i^ulfillment Group 
: outeiik- the project Team. i 

>';;i);:i' 

; Whore the system or rervice is commouiy available to the general } 

; eribtio. ’ i 

R*“-,niut-k>nTime 

: i ho measure of time an rnddent or Service Request can remain in a i 

iio-i- resolved status befisre an SLA Breach occurs. I 

.: iv!'. .r;:;','' i;!!'i',' 

; f low long a Fulfillment Group or incident managemertt team has i 
: to review a ticket and provide a response, ! 



; A moans of delivering value to cusromers by facilitating outcomes I 

ciislomsTs want to achieve without the ownership of specific costs and i 

Si?rvii.:o Desk 

I he single point of contact betwecm the rervice provider and the users, j 


The } ielp Desk w’ill answer phone calls and email from our LC End j 

. (.. set's, 24 hours a day, and ^3 days a year, to open trouble tickets. The j 
Mel p Desk is closctd on tire two holidays July 4th and Christmas. W’ork j 
; on ticketsopened after hoursand on weekendsoTholiday.s will ]«gin j 

at 7:(X) the next busine,ss dav. ■ 

l| Sei’VM'C D(>sk C^aUUogue 

I - _ - 

I A structured diKumentwithinformation about all live IT service, I 

indiKl tng thost; available for deploynnent. The .service catalogue is part j 
; oi the .st^rvice portfolio and contains iiuhjrmation about two ^'pe of IT j 
■ .service: aisloiner-facing services that are visible to the SUs; and i 

j supporting .service-s required by the rerv'ice provider to deliver j 

; customer-facmg services. ! 

Service i-»’vel 

) ..An bL A is a dr tunrent thiat establishes an agreement bebveen an IT j 

i service provider and a client to desoibe IT services, .specify the | 

; lesjxinsihiiities of both parties, and document the expected service- | 

: level targets. : 

I SI \Bu Hh 

i 

; t'..x<:ccdvtic the maxinuim lime fraine required for the effective response or \ 

I rlic nmetramc required for the ticket solution in accordance with the tenns } 

1 ani! ievt:! ot the ticket .soKition i« compliance with its categorwahon in the | 
l {htonrv .Marnx. i 

ji soniu Inti Un as 
j {SLl) 

I StTvice R«|urat 

1 SavueUvel Terras (SIT)- SLTs are event-driven performance | 

. criteria wluch give context to measures and provide a mathematical 
bicsrs to uitdGrstand organizational performance. i 

! A i-tx-imr-st tor e .routine .sxirvice has been subnrutted and will be routed to 1 
: a buitillment. Croup for action. There are no users or systems 1 

; experiencing an incident. i 

[| bervia; Uvns (SU) I 

I Ssgnjficance I 

. Library .support bu.sines.s unit I 

A u m UM d to idt ntiK the different priority levels as a measure of j 

importance to the organization. i 

jj Si.!ppc>rt:,Sei'vi(.:(;’s ! 

I I 

l i 

j U u eutnniunK UKns t 

.Support servii:es aix; defined by the capabilities that support common 1 
bicsiness tunaions perJonned by nearly all Federal organizations. j 

1 hese include t unctionai areas such as budgtrting, finandaS, hunutn 1 

re.sour^.i:*, a.sset, amt property itnd acquisition management. 1 

f hi,s serv«:e pro\ade.s solutions that suppoi'l the LOC i 

tvlecornmumcation-s needs. This includes the following: ( 
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. . . 

• . ..-e, softw’aiB, and voice i 

•itrucnirc 

• Data: Support for tools, hardware, and infrastructure that supports i 
, aata transmission. 

• kaaiilies: OversjghtsuDpon for the Library data center, toinclude ! 

. power. KX'anon. and caDling. 


' 1 -. M rv 1 e pn \. lues s,.pf>ort for an employee to perform work, during ! 

: anv part ot regular, oaid hours, at an approved alternate worksite (e.g. j 
■ nonu; ur teitrwork centerj. 


i m; categorization ot how quickly an incident or ticket needs to be | 


bcjTices provide secure netw'ork connectivity' to the LOC wireless j 
netvvoi'k tor stall and the general pubiic. 

ill biuiding H'lrelcss: The cellular network within the confines of i 
: l .tX. Duudings providing staff and visitors access to external i 

cclUiiar Cx-irriei' networks, botir data and voice. 

VVi-.hi: The LOC wireless local area network offered to steff and 1 
visihM's to provide data connectivire to the internet LCXl Guest is i 
the current LOC Wi-Fi. ' : 

1 Wcjrk Degradation 

VV licre an IT sy,stem continues to be useable but performs below nonnal i 
operating levels. A system may be slow to respond to user requests or i 
j\ii t ot a system may fail entirely with other parts continuing to ; 

, tunction. ! 

[ VVcrt'k Stoppiige 

: An internipHim of IT .services or accc« to one or more systems which | 

■ results m one or more users not being able to perfeam routine assxg.r»Kl | 

: tasks which they are normallv able to perform. < 
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Ament, Douglas 

Barton, Bud 

Wednesday, August 10, 2016 1:49 PM 
Ament, Dougias 
RE: Latest Draft SLA - 081016 


■ 'Mc v-c'li t liaiize and return for final review and si^atures. 


Fmm; Anient, Dosiglas 

Sent: Wednesday, August 10, 2016 12:08 PM 

To; Barton, Bud 

Subject: Latest Draft SLA - 081016 

Bud, ■ ■ ■ ■ 

Please fmd attached the latest draft SLA which includes Copyright Office edits for your review. The ‘‘Redlsue” 
version clearly shows all of our proposed edits which hopefully makes it a little easier to review. Let me know 
if you have any questions. 

Thanks, 

Doug 

(Dougfas j4nteM 

Cfiirflnfomation Officer, VS Copyrigiit Office 

101 Indepen&nce '3% C9^~403 

Wasfiington, 0C 20S40 

202'70r~S440-- Office 

202~413'46S6- MoBiie 

damenWCoc.gc y y 


Prom: 

Sent: 

To: 

Subject: 


1 
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Amefit Douglas 


From: 

Barton, Bud 

Sent: 

Thursday, August 11, 2016 2:22 PM 

To: 

Ament, Douglas 

Subject; 

RE; Latest Draft SLA - 081015 


Doug, 

Thank you for the document although I thought this was the MOD not SLA, my mistake. In consuitation with GAO, OCIG 
is incorporating baseline conimodity and enterprise IT service offerings Into a service cataiog that replaces the need for 
indivklua! service unit SLA agreements. MOUs will be used for mission specific needs not initiaiiy covered in the service 
cataiog which wili be published before the end of the FY16. i know OCIO team members have been working with 
copyright team members to iron out concerns with the MOU and hope that is going weii. ! understand your hesitancy to 
sign off on the MOU since the service catalog has not been published. We can defer completing the MOU until after the 
service catalog is published it you prefer. 

Bud 


Bernard A. Barton,, Jr;"'""' 

Chief Officer 

UiiRARVOf 

®l-CONGMSS 

iOl Independence Avenue, S.E. 
Washington, D.C. 20540-1300 
202-707-1.246 


From: Ament, Douglas 

Sent; Wednesday, August iO, 2016 12:08 PM 

To; Barton, Bud 

Subject; Utest Draft SIA - 081016 
Bud, 

Please find attached the latest draft SLA which includes Copyright Office edits for your review, The “ReclHne” 
version clearly shows all of our proposed edits which hopefully makes it a little easier to review. Let me know 
if you have any questions. 

Thanks, 


Doug' ' 

<DougCas, ‘Ament 

Chief Inf ormation Officer, ‘VS Copyright Office 
.101 Independence Jive, S‘£, CM-403 
‘VCasfiington, (DC 20540 



202^707-5440 - Office 
202-4] 3-4656 -MoBik 
dhment@ focjm^ 
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Memorandum of Understanding 
Between 

Information Technology Services 
And 

Copyright 


1. INTRODUCTION 

This Memorandum of Understanding (MOU) defines the terms under which Copyright and 
Information Technology Services (ITS) will coordinate and interoperate prior to, during, and 
immediately following the deployment of the Windows XP platform in accordance with the 
Workstation Configuration Management (WCM) project. Specifically, this MOU establishes 
the responsibilities of the relevant parties with regard to the following 12 areas: 

1. Training 

2. Data Management 

3. Software License Authorization 

4. Application and Workstation Requirements 

5. Deployment Preparation 

6. Data Migration 

7. Logistics 

8. Workstation Build 

9. Workstation Delivery and Setup 

10. Workstation Recycle and Surplus 

1 1. On-Site Support 

12. Production Support 


2. PARTIES 

This document constitutes an agreement between ITS and COPYRIGHT. 


3. TERMS AND CONDITIONS 

A. This MOU may be amended only upon agreement between ITS and COPYRIGHT. 
Requests to modify this MOU, including appendices, must be submitted in writing 
from one party to the other. 

B. This document takes effect upon signing by the Director, ITS, or his/her designee, 
and COPYRIGHT. 


- 1 - 
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4. RESPONSIBILITIES 

The Parties agree to accept the following responsibilities in accordance with the purpose of 
this Memorandum identified in Section 1, Introduction. 

4.1. Pre-Deployment 

4.1.1. Training 

ITS shall: 

a) Develop a WCM Training Plan. 

b) Provide training' on the fundamentals of the Windows XP platform. 

COPYRIGHT shall: 

a) Register users for training on the Windows XP platform via the Online Learning 
Center or arrangement with the WCM Project Coordinator, 

b) Direct users to attend training on the Windows XP platform. 

4.1.2. Data Management 

ITS shall: 

a) Provide a list of standard file extensions to COPYRIGHT (see Appendix A). 

b) In the event that the process for storing COPYRIGHT users’ GroupWise archives 
on the LC network has not been completed, migrate archives to the default folder 
on the C drive -C:\NGWARC. 

COPYRIGHT shall: 

a) Provide a listing of WCM non-standard file extensions used in COPYRIGHT, 
subject to modification (see Appendix B). 

b) Run DISK CLEANUP and DEFRAGMENTER. 

c) Move all COPYRIGHT user data files to users’ “My Documents” folders. 

d) In the event that COPYRIGHT has installed applications where the data files are 
not located in the “My Documents” folder, COPYRIGHT shall identify these files 
in writing to ITS requesting they be added to WCM standard file extensions list 
for COPYRIGHT. 

e) Inventory file extensions of non-standard COPYRIGHT data files and provide to 
ITS. 

f) Provide ITS with a list of computer IDs for users that will be deployed so that 
data can be copied to the network. 

g) Submit any exceptions in writing to the ITS Release Team Manager. 

h) Migrate COPYRIGHT users’ GroupWise archives to a network location prior to 
the XP deployment. 


' Training shall consist of briefing end-users on the WCM Project, workstation security, the differences between 
Windows 2000 and the Windows XP platform, and instructions on how to manage their desktop and data. 


- 2 - 
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4.1.3. Software License Authorization 

Software license management is an integral partof WCM project. Some licenses are 
owned by ITS, while others are owned by COPYRIGHT. COPYRIGHT is required to 
inform the WCM Requirements Effort what licenses they own and provide associated 
proof of ownership, such as keys, media, contracts, etc, (if necessary) for additional parts 
of the WCM process. Specific details of the COPYRIOHT/ITS licensing agreement are 
contained in the Software Licensing Agreement (see Appendix C). 

ITS shall: 

a) After the WCM Requirements Effort has received and organized the ITS and 
COPYRIGHT license information, provide COPYRIGHT with a list of software 
applications and number of licenses to be installed during deployment, stipulating 
who owns which licenses and in what quantities. 

b) Configure the Live State Discovery tool to track license utilization. 

COPYRIGHT shall: 

a) Provide the WCM Requirements Effort any and all software application licenses 
with Application Fact Sheets that are owned by COPYRIGHT. 

b) Add license information to the Live State Di.scovery tool for license tracking. 

4.1.4. Application and Workstation Requirements 

ITS shall: 

a) Make the Application Fact-Sheet template(s) available to COPYRIGHT in 
electronic format. 

b) Make the Windows XP Deployment Checklist available to COPYRIGHT in 
electronic format, 

c) Transfer data provided by COPYRIGHT into the DCL database. 

COPYRIGHT shall: 

a) Complete and submit an Application Fact-Sheet for all COPYRIGHT software 
not in the core configuration to ITS. 

b) Provide data for the completion of a single Windows XP Deployment Checklist 
for each COPYRIGHT workstation to ITS. 


- 3 - 
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4.2. Deployment 

4.2.1. Deployment Preparation 

ITS shall: 

a) WCM Requirements Effort shall compare end-user Windows XP Deployment 
Checklists against COPYRIGHT Application Fact-Sheets and resolve any 
differences with the COPYRIGHT Liaison(s). 

b) WCM Release Effort shall confirm approved Windows XP Deployment 
Checklists with the COPYRIGHT representative one week before scheduled build 
and refer any differences to the WCM Requirements Effort. 

c) Update Windows XP Deployment Checklists as necessary. 

d) Review Application Fact-Sheets for accuracy and completeness. 

e) Verify user data in “My Documents” folder has been backed up. 

f) Deliver “Library of Congress Windows XP Quick Reference Guide” manuals to 
COPYRIGHT Liaison(s). 

g) Schedule weekly meetings with COPYRIGHT Deployment Team to review 
scheduling. 

COPYRIGHT shall: 

a) Determine COPYRIGHT staff location and special needs or considerations. 

b) Distribute “Library of Congress Windows XP Quick Reference Guide” manual to 
all COPYRIGHT users. 

c) Supply a list of end-user names per day that will be upgraded at least ten ( 1 0) 
days prior to date of workstation delivery. The list shall consist of a minimum 
number required to fully employ the Release Team provided by ITS. The 
expectation is that each Release Team member can perform up to six (6) 
workstation deployments per day. 

d) Ensure that a COPYRIGHT representative will be available one week before and 
during the scheduled deployment. 

4.2.2. Data Migration 

ITS shall: 

a) Migrate user data from old workstations to LC network using automated scripts. 

b) Create a ghost image of each COPYRIGHT end-user workstation two (2) days 
prior to deployment. 

c) Migrate user data from the LC network to new workstations using automated 
scripts. 

d) Store the ghost image of each COPYRIGHT workstation on corresponding local 
drive of new workstation. 

COPYRIGHT shall: 

a) Migrate user data not in standard locations from old workstations to LC network. 
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b) Migrate user data not in standard locations from LC network to new workstations. 

4.2.3. Logistics 

ITS shall: 

a) Confirm deployment schedule with COPYRIGHT. 

b) Arrange for delivery of hardware and equipment for end users. 

COPYRIGHT shall: 

a) Create deployment schedule by user, building, floor, room. 

4.2.4. Workstation Build^ 

ITS shall: 

a) Provide a workstation with Core and Authorized applications as listed on each 
DCL. 

b) Add the relevant COPYRIGHT and division-specific workstation support group 
to the local admin group 

c) Add a COPYRIGHT local admin account and password to the local admin group 
and inform COPYRIGHT of the password 

COPYRIGHT shall: 

a) Perform manual installation of any Authorized and licensed software as approved 
by the Workstation Change Control (WCC) working group, WCM Requirements, 
and Security Efforts. Installation will occur in a build area prior to installation at 
the end-user’s work site. 

b) Push Authorized applications to COPYRIGHT workstations with Live State 
Delivery, if necessary. 

4.2.5. Workstation Delivery and Setup 

ITS shall: 

a) Remove old workstations from COPYRIGHT office space to a COPYRIGHT 
staging area prior to set up of new workstations. 

b) Set up workstations (including monitor, mouse and keyboard) at the agreed-upon 
rate (see Section 4.2.1), with a maximum rate of 20 workstations per day. 

c) Perform and document any manual adjustments on new workstations. 

d) Compare new workstations to Windows XP Deployment Checklists for 
inconsistencies. 

e) Test key components of the system (see Appendix D). 

f) Ensure that the end-user verifies proper workstation set-up by signing off on the 
DCL. If end user is not available, then the COPYRIGHT representative shall 
provide the appropriate sign off. 


^ Ail CIS workstations will remain as Windows 2000 workstations due to their high complexity. 
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g) Provide a copy of the asset management information for the old and new 
equipment to COPYRIGHT. 

COPYRIGHT shall: 

a) Ensure each end-user prepares his/her physical space for the workstation 
exchange. 

b) Ensure each end-user signs a User Sign-Off Sheet indicating that the machine has 
been delivered, has connectivity to the LC network, and is functioning correctly. 

4.2.6. Workstation Recycle and surplus 

ITS shall: 

a) Deliver all surplus equipment to the COPYRIGHT designated storage location. 

b) Prepare an ISS surplus request for pick-up of monitors. 

COPYRIGHT shall: 

a) Recycle GX620 workstations for deployment as XP workstations within 
COPYRIGHT. 

b) Surplus all non-Windows XP-compliant workstations and send to Landover 
facility. 

c) Be responsible for wiping the hard drives for workstations that possess sensitive, 
confidential information, on a case-by-case basis. 

d) Designate a storage location for monitors. 

4.3. Post-Deployment 

4.3.1. On-site Support 

ITS shall: 

a) Provide on-site support to respond immediately to service requests for three (3) 
days following delivery of new workstations. 

COPYRIGHT shall: 

a) Direct its users to call the ITS Help Desk for assistance related to the rollout. 

b) Enter service requests requiring ITS assistance into Remedy. 
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4.3.2. Production Support 

fTS shall: 

a) Provide workstation products and services. 

b) Provide WCM services relating to requests for changes to current workstation 
configurations. 

c) Track workstations from receipt through delivery to COPYRIGHT. 
COPYRIGHT shall: 

a) Provide dedicated help desk support for Windows XP to COPYRIGHT users 
(e.g., assistance, troubleshooting, ete.). 

5. POINTS OF CONTACT 


5.1. ITS Points of Contact 


Name ffs 

& 

lulc 

Service Unit 

r 1 

i»rk NuiiiIut 

Jason Yasner 

WCM COP Project Manager 

ITS 

202-707-2255 

Keith Emerson 

WCM Release Team Lead 

ITS/SAIC 

202-707-5786 

Kevin Tucker 

WCM Project Coordinator 

ITS/SAIC 

202-707-7890 


5.2. COPYRIGHT Points of Contact 


Name 


Service 1 nit 

WorkVimibei 

Julia Huff 

Chief Operating Officer 

COP/REG 

202-707.6042 

Mike Burke 

Chief, Copyright Technology Office 

COP/CTO 

202-707-8356 

Jerry Tuben 

Supervisory IT Specialist 

COP/CTO 

202-707-5293 

Gwen Roberts 

Automation Liaison 

COP/CTO 

202-707-7381 

Richard Purnell 

Automation Liaison 

COP/CTO 

202-707-0337 

James Taylor 

Automation Liaison 

COP/CTO 

202-707-7706 
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Signature Page 

Memorandum of Understanding (MOU) 
Between 

Information Technology Services 
And 

Copyright 


This MOU establishes a symbiotic relationship between ITS and COP YRIGHT prior to, during, 
and immediately following the deployment of the Windows XP platform in accordance with the 
WCM project. While COPYRIGHT is dependent upon ITS to deliver the MOU identified 
products and services, the quality and timeliness of those products and services is dependent 
upon COPYRIGHT satisfying their responsibilities in each of the 1 2 defined areas of this 
document in a timely manner. 


I. the undersigned, have read the Memorandum of Understanding and agree to abide by all the 
terms and conditions outlined herein. 



s6 11 -n -'(Ji 

Julia Hufivtiopyright Office Date 


FINAL 
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Appendix A - Standard File Extensions 

ITS will use an automated script to identify files to be migrated. The default extensions are as 
follows: 


- .bmp 

- .doc 

- -gif 

- -jpg 

- -jpeg 

- .mdb (MS Access) 

- .mpp (MS Project) 

.ppt (MS Power Point) 

- .tif 

- .txt 

- .vsd (MS Visio) 

.wpd (WordPerfect) 

- .xls (MS Excel) 


FINAL 
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Appendix B - Non-Standard File Extensions 

ITS will use an automated script to identify files to be migrated from the non-standard default 
extensions provided by COPYRIGHT, listed below. 

- .cfm 
■htm 

- .html 

- Php 

- .mex (Macro Express macros) 

- .wpm (WordPerfect macros) 

- .pdf (Acrobat format) 


FINAL 
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Appendix C -- Software License Agreement 


Agreement 

Software Licensing Responsibilities 


Agreement between Information Technology Services and Copyright on organizational 
responsibilities for licensing for applications installed on production workstations controlled by 
Workstation Configuration Management (WCM). 

(1) All software to be deployed must have approval of the Workstation Change Control 
Working Group and appropriate ITS signoff. Endorsement requires COPYRIGHT 
submit a completed Application Fact-sheet or Change Request Form, and the completion 
of a Security Review performed by the ITSG in ITS. Where there are vulnerabilities to 
an application, a waiver signed by the Director of ITS must be signed prior to installation 
in the production domain. 

(2) The Application Owner is responsible for tracking and managing its software licenses 
and maintenance agreements. ITS is the Application Owner for any software included 
on the Horizons CORE and Priority I Applications list. (See attached a copy of latest 
version of this list). Any additions and/or changes to this list are subject to review by the 
two signing parties. COPYRIGHT is the Application Owner for any software procured 
or developed for the exclusive or primary use of COPYRIGHT business units. 

(3) The Packaging System will serve as the primary control for the distribution and license 
tracking for any application with a significant distribution target group. All items on 
the Horizons CORE and Priorityl Applications list will be packaged by ITS, and ITS 
will manage licenses through that facility. For COPYRIGHT owned software which 
warrants distribution via the Packaging System, ITS will control the package distribution, 
though COPYRIGHT will frequently assist in the package creation process. 
COPYRIGHT will manage licenses by monitoring the distribution by the Packaging 
System. This monitoring could be accomplished via real time access or via regular, 
printed reports, 

(4) For software applications which COPYRIGHT wishes to deploy manually, 
COPYRIGHT will have responsibility for both managing the licenses and manual 
deployment. 

(5) During the WCM Rollout, ITS will assume responsibility (including new purchases, 
upgrades and maintenances) for the applications on the Horizon! CORE and Priorityl 
Applications list as individual instances are distributed via the Packaging System. 
Conversely, COPYRIGHT will reduce its licensing investment as individual instances 
are migrated from Windows 2000 to Windows XP. 


FINAL 
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(6) Once ITS assumes responsibilit}’ for licensing on a Windows XP w orkstation, ITS 
will maintain this responsibilits going fonvard. 



' / Z. ' / '4 — 0 "/ 

Julia Huff. Copyright Office Date 


FINAL 
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Appendix D - Release Checklist 

Technician: 

End User: 

Host Name: 

Service Unit: 

MAC Address: 

LOC Tag: 

The new workstation will be delivered based on the schedule created and arranged by the Service 
Unit Liaisons. 

To avoid losing data, save and close any open flies and exit any open programs before you turn 
off your computer. 

1. n Shut down the operating system: 

a. Save and close any open files, exit any open programs, click the Start button, and 
then click Shut Down. 

b. In the Shut Down Windows window, choose Shut Down. The computer turns 
off after the operating system shutdown process finishes. 

2. n Ensure that the computer and any attached devices are turned off. If your 

computer and attached devices did not automatically turn off when you shut down 
your operating system, turn them off now. 

3. [U Disconnect old workstation and connect new workstation and all attached devices 

from and to their electrical outlets. 

Disconnect Connect 

n [U Network cable or any telecommunication connections 

[H [D Power cord 

CD D Mouse 

D CD Keyboard 

□ □ Local printer (if required) 

CD D Local scanner (if required) 
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n CH Any additional peripheral devices 

4. [U Login to the new workstation for the first time as the User to create a profile for 

the user and check that the core applications open and run 

5. d Have end-user log into his/her GroupWise account and check the location of the 

archive Directory, ensuring that it is pointed to the proper location (NGWARC or 
LOG Network) 

6. Check the functionality of the following applications: 


□ 

Adobe Acrobat Reader 

□ 

Microsoft Office XP 

□ 

Apple QuickTime 

□ 

Microsoft Visio 

□ 

AVUE Employee Services 

□ 

Microsoft Windows 

□ 

AVUE Management Services 

□ 

Media Player 

□ 

FileZilla 

□ 

Novell GroupWise 

□ 

Hypersnap 

□ 

RealOne Player 

7, □ 

Ensure there is: 




D Network connectivity 

n Peripherals are configured correctly (e.g., printers, scanners, etc) 

8. CH Map the necessary network drive(s) (this information can be found on the 

Deployment Checklist). 

9. n Log out of user account and login as the administrator. 

10. D Install local and network printers as required. 

1 1 . n Print a test page from the local printer (if applicable to verify that the printer is 

functional 

12.0 Record data from new computer: 
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a. Connect to \\V aiid v I \WMCP\Tools\WCM \WCM and Select the Gather Data 
Button (button #1) 

b. Populate the First and Last Name, Room, Phone numbers, and LOC Tag Number 
Fields 

c. Click on Save Data and Exit 

13. IZI Migrate the End-User’s Data 

a. Connect to WVandv 1 \W.MCP\Tools\WCM and Select Restore Files and Images 
(button #3) 

b. Click on the User Profile drop down box and select the end-user’s profile. 

c. Once the profile is selected click on Search for a folder like this account to 
search for the end-user, 

d. Check the boxes next to the backup folder and Ghost files and click on Select 
Backup Folder to Copy. 

e. Click on Restore Files and Images to start the file restoration. 

f At the completion of the restoration, confirm that the Ghost image has been 
copied to the workstation and is readable. 

g. Once the file restoration is complete click on Exit. 

h. Have end-user log in and confirm that the workstation is operational 

i. Have the designated representative sign the DCL 

1 4. D Pickup the end-user’s old workstation and monitor for removal. 

1 5. CH Record the CPU LOC Barcode and Serial Number. 

16. n Place workstation (e.g., CPU, monitor, keyboard, etc.) in the agreed-upon 

designated area of the service unit/department. 

17. [H Place the monitors in LM-G04 on the entry ramp. 

1 8. D Turn in the completed Deployment Checklist along with all corresponding 

documentation (i.e., deployment step-by-step checklist, data migration checklist, 
and end-user acceptance form) to the task lead for electronic compilation and 
updates. 


FINAL 
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CONGRESS 


Memorandum of Understanding (MOU) 

Between Information Technology Services (ITS) and the 
Copyright Technology Office (CTO) for Hosted Application 
Support 


Hosted Application: 

eCO (The Electronic Copyright Office System COP-0001) 


November 7, 2011 
Version 1.13 


Signatures: 

I agree to the terms of this Memorandum of Understanding. 


ITS Signatory Authority: 

Al Banks 
Director, ITS 



Copyright Office Signatory Authority: 

Doug Ament 
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MOU Between ITS and COP 


ITS Hosted Application: eCO 


Revision History 


Date 

Author 

Version 

Change Reference 


A. Goshay 


Initial document developed by ITS 

Q9/1 5/2008 

A. Goshay 


Updated Backup Requirements 

09/22/2008 

A. Goshay 

Draft V 1.0 

Added comments by Janet Chou 

04/16/2009 

CJAM 



03/29/2010 

J. Gillus 


Added vulnerability scanning requirements for ITS. 

03/31/2010 

CJAM 


Added ITS responsibility for end user hardware/PC issues 

08/12/2010 

Vijay Alan 

Draft V 1.3 

Added eCO 8.1 system changes, Figure 3. 4, 5, 6, 7, 8 & 10 
Updates and Appendices 

08/27/2010 

Heena Acharya 

Draft V 1.4 

Updated based on review comments from Jerry,Jannie Gail 
and Loretta 

03/04/2011 

Q Schlesier 

Draft V15 

Removed SOPs to make them stand alone docs and updated 
contact list 

uniiQm 

G Schlesier 

Draft V1. 6 

Incorporated D. Ament’s comments 


G Schlesier 

Draft V1. 7 

Incorporated D. Ament’s comments and removed draft 
designation for signature. 

060/7/2011 

Q Schlesier 

Draft VI. 8 

Incorporated comments from J. Sheppard 

08/18/2011 

J Sheppard 

Draft VI. 9 


9/12/2011 

Kim Dean 

Draft VI. 10 

Overall document revision-applied LOC document standards 
and ITS MOU standards. 

9/30/11 

J Sheppard 

Draft V1.11 

Incorporated comments from Joi and Tamara 

10/12/11 



Incorporated comments from another round of ITS review 
(Youkel, Bucknor, Jorstad, Grieg) 

11/7/11 

J Sheppard 

Draft v1. 13 

Incorporated comments from CTO and fixed a couple minor 
issues 


n 
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MDU Between ITS and COP 


ITS Hosted Application: eCO 


Reviewers 

Name | Position 


Douglas Ament 

Director of CTO 

Denise Wofford 

Deputy Director of CTO 

Gustav Schlesier 
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1 Supersedes 

This Memorandum of Understanding (MOU)/ Interconnection Security Agreement (ISA) for Hosted Application 
Support (HAS) between Information Technology Services (ITS) and United States Copyright Office (COP) 
supersedes all other MOUs concerning Application System Support for The Electronic Copyright Office (eCO) 
system. 


2 Revision Schedule 

This MOU shall remain in effect barring any changes and/or updates deemed necessary as a result of changes in 
funding, strategic direction, or a review of this document by all parties. The MOU will be reviewed at least annually 
for any necessary changes. 


3 Purpose 

The purpose of this memorandum is to establish a management agreement between ITS and COP regarding the 
management, operation, maintenance and security of the eCO system. This agreement will govern the 
relationship and allocation of responsibilities between ITS and COP, including designated managerial and 
technical staff, in the absence of a common management authority. 

Note: Configuration, maintenance, and support of Copyright workstations are outside the scope of this document 
and are governed by the terms of a separate MOU. 


4 Authority 

The authority for this agreement is based on General Information Technology Security Directive 01, Information 
Technology Security Policy of the Library of Congress, dated November 5, 2010. 
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5 Background 

5.1 History of Relationship 

The Copyright Technoiogy OfTice (CTO) recently upgraded the Electronic eCO System fiom Siebel version 7.7 to 
8.1. CTO will continue to be responsible for future development, enhancements and maintenance of the eCO 
application. While ITS will be responsible for maintenance and support of the infrastructure, no modifications to 
the overall eCO system will be made without coordination and agreement by both parties. 

5.2 Hosted Application 

eCO is hosted on the Library of Congress Application Hosting Environment (AHE). The AHE serves as the 
General Support System (GSS) for multiple applications. In addition, eCO has a disaster recovery environment 
hosted at the Alternate Computing Facility (ACF). 

5.2.1 Application Summary 

Table 1 - Hosted Application Summary 


System Name 

The Electronic Copyright Office (eCO) 

Function 

Copyright service request processing and information retrieval 

Services Utilized 

The services utilized by the Hosted Application 

Servers: Table 7 —AHE Services fin AoDendixA) 

Environment Architecture: eCO Architecture fin AooendixAl 

Software Utilized 

The software utilized by the Hosted Application 

Workstations: Table 4 - Workstation Software fin Aooendix A) 

Windows Servers: Table 5 - Windows Server Software (in Aotjendix A1 

Unix Servers: Table 6 ■ Unix Server Software (in Aooendix Ai 

Levels of Concern 

The Hosted Application requires data and systems to be protected at the following 
levels (at a minimum): 

Confidentiality Moderate 

Integrity Moderate 

Availability Moderate 

Tier Level 

The Electronic Copyright Office System (eCO) is designated as a Tier 1 application. 


5.2.2 Application Architecture 

The application architecture, including cument hardware and software components, is detailed in Aopendix A . The 
architecture specifics are subject to change during the life of the eCO system and this MOU. Any changes will 
made in accordance with the Change Management processes described in Section 10 of this document. 
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6 ITS/COP Roles and Responsibilities 

It is the intent of both parties to this agreement to clarify the specific roles and responsibilities of COP and ITS 
with respect to development, enhancements, maintenance and security of the hosted application “Electronic 
Copyright Office System (eCO)". 

Per this agreement, both parties must agree to fulfill their responsibilities. Failing to fulfil! r^ponslbilities can lead 
to disconnection. In the case of a Hosted Application, disconnection will consist of shutting down the application’s 
processes and perhaps disabling access to database or other shared resources. Please note that disconnection 
would be a last recourse and would only be performed to protect the overall Library resources. 

Ail support responsibilities listed in section 6 that are not mandated by LOC policies are dependent on the 
availability of resources (staffing, hardware/software, funding, and contract award), and will be sdieduled as 
resource avaiiabitity permits. 

8.1 Security 

As a Hosted Application, eCO relies upon the security controls within the AHE. Many of the security controls that 
would typically be documented In a System Security Plan (SSP) for a Major Application can be found in the LC 
DMZ/Internet and LC Intranet SSPs. There are no environmental or technical factors teat raise special security 
concerns for eCO. Since eCO ains on the Application Hosting Environment (AHE), protection of eCO and 
information is performed by AHE. The security responsibilities for eCO include: 

1. Both ITS and COP will adhere to all LCRs and IT Security Directives. 

2. ITS shall proactively manage all aspects of information security on the operating systems and server 
software providing services to the Hosted Application. 

3. COP shall proactively manage all aspects of information security on the Hosted Application, within its 
accreditation boundary. 

4. ITS shall run quarterly security scans and work with CTO to resolve any High vulnerabilities reported by 
the vulnerability scanners. 

5. ITS shall provide all system and service security and access logs on a daily basis to the CTO ISSO or 
their designee 

6. The CTO ISSO shall monitor system security and access logs, and will investigate and report any 
incidents to tee LCSOC. 

7. COP shall make the Certification Package and signed Accreditation Memorandum for tee Hosted 
Application available to ITS for review. 

8. ITS shall make the Certification Package and signed Accreditation Memorandum for the Application 
Hosting Environment available to COP for review. 

9. ITS shall provide support to the CTO ISSO on the use of ITS-provided auditing tools. 

6.2 Network Infrastructure 

eCO relies on the LOC primary network for access to the Internet. There are no dial-up lines that access eCO 
directly. ITS is responsible for maintaining the network infrastructure upon which eCO resides as well as 
maintenance of pertinent hardware/software. Specifically: 

1 . ITS Is responsible for ail eCO Application technical infrastructore for tee Production, pre-production, test, 
development, training, and ACF environments (including server hardware and parts and service 
contracts, spare and redundant systems, online storage devices, power conditioning, networks, fc^ckup 
systems, and off-site backup). 
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1 . COP is responsible for all software, software licenses and maintenance agreements specific to the eCO 
Application which includes the workstation application client,, windows server software and the Unix 
server software listed in Appendix A, with the exception of the IBM Tivoli (LDAP) Directory Server and 
Oracle database software. 

2. ITS will provide and maintain the IBM Tivoli (LDAP) Directory Server software and the Oracle database 
software. 

3. COP is responsible for the technical infrastructure for the CTO Development Lab (including server 
hardware and parts and service contracts, spare and redundant systems, online storage devices, 
workstations, power conditioning, networks, backup systems, and off-site backup). 

4. Configuration, maintenance, and support of Copyright workstations are governed by the terms of a 
separate MOU. Both parties agree to abide by that MOU for Copyright workstations. In particular, any 
eCO application components that will run on LOC workstations, including the workstation software 
components listed in Appendix A, must be approved through the Workstation Configuration Control 
(WCC) process prior to implementation in the LIB domain. Any software considered freeware to the LOC 
yet obtained at a cost by any other user must be approved by the LOC OGC prior to submission to the 
WCC. Freeware that is free to all users does not require LOC OGC review and approval. 

6.4 Supporting Software 

The following specifies the manner in which support of all software related to the application, eCO are handled 

between ITS and COP. 

1 . COP is responsible for end-user support of the eCO application, and any associated eCO-specific client 
hardware and peripherals. 

2. COP is responsible for any eCO application software maintenance, troubleshooting and upgrading. 

3. COP will serve as the administrator of the eCO Application specific software (i.e., Siebel administrator, 
Captiva Administrator, LDAP Administrator, Adobe 2D Administrator, Xerox FreeFlow Administrator, ABC 
Upload Administrator, etc.) 

6.5 System Administration 

1 . COP will perform application system administration for the eCO application. 

2. ITS will provide technical support, administration, assistance, and coordination related to the 
infrastructure components it administers, 

3. ITS will perform database administration for the production, development, test, training, and pre- 
production environments. 

4. ITS will perform implementation of any production system changes including installation of a new release. 

5. Any changes to the eCO system will be made in accordance with the appropriate CTO and ITS change 
control processes. 

6.6 System Monitoring 

1 . ITS will maintain monitoring tools to provide at a minimum basic monitoring of the eCO production system 
infrastructure, such as server, database, and network availability. 

2. CTO will perform monitoring of the application during normal business hours. 

3. CTO will implement sufficient application level logging to support eCO system diagnosis and forensics in 
accordance with COP’S eCO reliability and performance objectives. 
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1. ITS will provide storage for the Oracle databases and the eCO Application data. 

2. CTO will provide quarterly storage need projections in accordance with OSI/ITS processes. 

3. ITS is responsible for providing enterprise class storage for eCO to meet these storage projections. 

5.8 Backup/Restore 

All Hosted Applications are backed up to tape according to the Storage Allocation Request (SAR) submitted by 
the system owner. For more information see IT Security Directive 01 . 

1. ITS will provide backup and restoration services tor the eCO system environments and data in 
accordance with the criteria specified in Appendix B. 

2. If COP requires any special backups in addition to the regular schedule, COP will submit a ticket defining 
the backup request, as far in advance as possible. 

3. To test the viability of the backups, on a periodic basis, COP wilt submit a ticket for ITS to restore specific 
data from the backups to a secondary location so that COP can perform a validation of the restored data. 

6.9 Disaster Support 

When events interrupt LOG normal operations and there is loss of eCO system usage, ITS will make every effort 
to recover all LOC supported systems as soon as possible. In disaster situations, when the LC IT Continuity of 
Operations Plan (COOP) has been activated, individual systems will be recovered per their designated Recovery 
Tier. 

6.9.1 System Recovery 

1 . ITS provides Tier 1 disaster recovery for eCO system, 

2. ITS provides synchronous replication of the storage system between DCF and ACF for eCO. 

3. ITS provides local and remote copies of the eCO system backups. 

4. ITS and COP will test eCO ACF and failover capabilities annually, The scope of testing shall include eCO 
eService and eCO Public Sector. 


Table 2 - Recovery in Disaster Situations 


Tier 

Contiiiiious Data Daekup 

Hardware Available at ACF 

Recovery Period 

1 

Yes 

Yes 

1 

*24 hours 


"Best Effort 


6.10 Procedures 

1 . COP will follow ITS policies and procedures for anything related to the AHE 

2. COP and ITS will document Standard Operating Procedures (SOPs) for those areas where both parties 
have responsibilities. These SOPs shall define all of the steps to complete that particular activity and 
which group Is responsible for each task within the activity. Examples of SOPs to be developed include: 

• Implementing Password Changes 
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• Releasing/Installing Software Patches 

• Stopping and Sterling the eCO System 

• eCO System Monitoring 

• eCO ACF Activities 

• SSL Certificate Renewal 

• eCO Incident Response/troubleshooUng 

• eCO Software Releases 

6.1 1 Additional Services 

For new eCO-related projects beyond basic O&M. including major upgrades or significant changes, COP will 
adhere to the teilowing processes; 

1. If the project meets the thresholds dictated by the Information Technology Steering Committee (ITSC), 
then COP will submit the project to the ITSC for approval, 

2. If tee project does not require ITSC approval, COP wilt submit the request through the ITS 
Project/Services Request Approval Process. 

Additionally, if the project meets the criteria for requiring Web Governance Board (WGB) approval, then COP will 
submit tee project to the WGB. Note: this applies to both ITSC and non-lTSC approval projects. 

COP is responsible for developing any required documentation (including cost benefit analysis) for such requeste, 
with the assistance of the ITS R&D COP Chief or their designee. 
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7 Communications 

Frequent formal and inforrtial communications are essential to ensure the successful management and operation 
of the application. The parties agree to maintain open lines of communication between designated staff at both 
the managerial and technicai levels. 

Elecfronic vwitten communication is the preferred metood of communication and all decisions should be 
documented. The two parties agree to designate, provide, and maintain contoct information for technical leads for 
the Hosted Application support (COP) and the hardware architecture support (ITS) to address new issues and to 
facilitate direct discussions between technical leads to support the management and operation of the eCO 
Application. 

Furthermore: 

1. V\foen changes to the eCO system or its support structure occur, written notice will be generated by 
the responsible party to communicate said changes to the appropriate stakeholders to include the 
other organization. 

2. With toe exception of emergency situations. ITS shall provide at least five (5) busing days advance 
notification of eCO-related system outages due to regularly scheduled maintenance. 

Table 3 - Primary Contacts within the Scope of this MOU 



Name 

Office Phone 

Email 

COP Primary Contact 

Denise Wofford 

202-707-2638 

dwof@loc,gov 

COP Secondary Contact 

Jeiry Tuben 

202-707-5293 

jtub@loc.gov 

ITS Primary Contact 

Tina Wilson 

202-707-0411 

twil@loc.gov 

ITS Secondary Contact 

Juliette Sheppard 

202-707-3932 

jsheppard@loc.gov 

eCO ISSO 

Jannie Grant Gillus 

202-707-1716 

jgrant@loc.gov 

AHE ISSO 

Sarah Garske 

202-707-0365 

sgarske@loc.gov 


To safeguard the confidentiality, integrity, and availability of toe application and the data stored, processed and 
transmitted, the parties agree to provide notice of specific events within the timeframes indicated in the sections 
below:(Sections 7.1 - 7.5). 

7.1 Meetings 

The primary means of communication to deal with complex issues shall be meetings. Both parties agree to the 
following: 

• Meetings on urgent (emergency) issues will require immediate attentton 

• Either party can call for a meeting 

• The meeting request must Include the type (routine or urgent) and the reason for the meeting 

• The party calling the meeting will provide a written agenda prior to the meeting. They will also provide a 
written summary of the meeting reflecting the topics discussed, toe major points of discussion within each 
topic, action items, and all decisions or conclusions reached 
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• On an annual basis, at a minimum, the parties \mH meet and discuss the MOU with the goal of updating it 
as necessary. 

7.2 Security incidente 

COP Technical steff will immediately notify their designated counterparte and ttie fSSO when a suspected 
security incident is detected, so that they may assist in determining whether the eCO system (or any of its 
subcomponents) has b^n compromised and take appropriate security precautions. The ISSO will notify the 
LCSOC or other appropriate personnel per current LOG security policies and procedures. Telephone contacts will 
be immediately documented in a follow-up email. The system owner will receive formal notification within five (5) 
business days after detection of the incident{s). 

7.3 Disasters and Other Contingencies 

Technical staff will immediately notify their designated counterparts In the event of a disaster or other contingency 
that dismpts the normal operation of one or both of the connected production systems. In addition, the event 
should be handled in accordance with the incident response SOP and/or the COOP/DR Plan. When applicable, 
work shall be performed In accordance with the ACF Activities SOP. 

7.4 Personnel Changes 

The parties agree to provide written notification of the separation or long-term absence of thar respective system 
owner or t«:hnical lead. In addition, both parties will provide notification of any changes In point of contact 
infoimation. Both parties also will provide notification of changes to user profiles regarding users performing 
significant application administration (e.g., account maintenance), including resignations or changes to job 
responsibilities. 

7.5 Requests for Technical Assistance 

Technical requests for assistance are received by ITS through the Library of Congress Help Desk ticketing 
system (currently Remedy). The system or owner of the issue area will receive forma! notification from the 
ticketing process, and will act on such requests when received. ITS will address requests for technical assistance 
according to ITS policies. 

1. ITS will provide support for all COP AHE-related hardware requests and problems, with the exception of 
client hardware and peripherals specifically associated with eCO (e.g. certain scanners and printers, etc.). 

2. COP will submit requests for ITS services (e.g. installations, changes, troubleshooting, etc.) as a ticket 
in the event of an emergency request, the official ticket may be submitted to ITS within 24 hours after the 
emergen<^ request is made directly to the required ITS personnel. Emergency requests will be kept to a 
minimum through good planning and coordination. 
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8 Disconnection 

As discussed above, in the case of a Hosted Application, disconnection will consist of shutting down the 
application's processes and perhaps disabling access to database or other shared resources. 

• ITS will call a meeting, the outcome of which may lead to disabling a Hosted Application, if the Service 
Unit fails to follow the requirements set forth in this MOU 

• ITS will warn the system owner via email of the specific infraction, giving at least ten (10) business days 
to rectify the issue, 

• ITS may immediately disable a Hosted Application if a vulnerability in the Hosted Application is 
determined to endanger other Hosted Applications or the Application Hosting Environment as a whole. 
This Is known as an Emergency Disconnection 

• In case of an Emergency Disconnection. ITS will notify the system owner via email and telephone before 
disabling the Hosted Application when possible and within 15 minutes othen^ise 


9 Cost Considerations 

• The Copyright Technology Office shall maintain the Hosted Application including all application software 
(server and workstation), peripheral equipment associated with the Hosted Application, application 
maintenance agreement, licensing, upgrading and customizations. 

• ITS shall budget and fund any recertification of the AHE required by IT Security Directives. 

• The Copyright Technology Office shall budget and fund any recertification of the Hosted Application as 
required by IT Security Directives. 


10 Change & Configuration Management 

1. Any changes to the eCO system hardware or software, as identified in the eCO Architecture diagram 
(Appendix A), will be communicated between CTO. Development, O&M & ITS team members to Identify 
the impact of the change. 

2. Any change, with the exception of emergency security changes needed to stop an imminent security 
threat, will be implemented in the development, test & pre-production environments, and tested 
successfully by ail parties before implementation in production. 

3. COP will operate under change and configuration management processes to manage changes to the 
hosted appitcafion. ITS will participate in these processes as appropriate. 

4. Any changes made to the hosted production environment must adhere to the ITS Configuration 
Management Process. 

10.1 Material Changes to System Configuration 

A material change is defined as a substantial configuration change that will impact what is supported or how the 
eCO system Is supported. When either the CTO or ITS identifies a change that may impact their counterparts, 
this change should be communicated in writing at least (1) month prior to testing and scheduled implementation of 
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the proposed change. This does not apply to changing passwords. The Initiating party agrees to conduct a risk 
assessment based on the new system architecftjre and to update tfie MOU within one (1) month of 
implementation. 

10.2 Emergency Configuration Changes 

Emergency changes are defined as those that are necessary to ensure that the application continues to fulfill its 
mission. While these changes are generally not material in nature, emergency changes that are material in nature 
can be macte unilaterally, but must immediately be followed up within 15 minutes wifii an email or phone call to 
the contact. Within 24 hours, a written notice must be delivered to the other party and an Urgent meeting must be 
called to discuss the changes. 

10.3 New interconnections 

The initiating party will notify the other party in writing at least one (1) month before it connects its IT system with 
any other IT system, including systems that are owned and operated by third parties. 
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Appendix A: Application Architecture 


This section describes the eCO application and system architecture as of September 2011, Any changes to this 
architecture will be made in accordance with the provisions outlined In the above MOU. 

Figure 1 eCO System Slebel 8.1 Product Environment Architecture 
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Table 4 - Current eCO-required Wortcstatlon Software 

Note: this software is subject to WCC and covered by a ^parate workstation configuration MOU. 




Internet Explorer 

8.0+/8.Q+ 

MS 

Mobe Reader 

9.0+ 

Adobe 

MSWOTd 

2003 

MS 

Oracle 11g Client 

ilg 

Oracle 

Voyager Client 

7.2 

Ex Libris 

InputAccel Client 

5.0 

Captiva 

yVinWedge 


TAL 

Siebei Dedicated Client 

8.1 

Siebei 

Calendar DLL (custom) 



Time DLL {custom) 



SUN JVM (Java Virtual Machine) (ftee download) 

1.4.1 

SUN 

Actuate Viewer (free with Siebei) 

8 

Actuate 

Fuiltsu-4220C Driver (free) 


Fujitsu 

Kodak TIF V\ewer (free) 


Kodak 

Numeric Pad DLL (custom) 



YESNO Popup DLL(custom) 



FileExistDLL (custom) 



Oracle Search OLL/OCX (custom) 
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Table 6 - Current Unix Server Software as of October 2011 


UnfaiSMver 

Soflwwn 

J 

i 

atfe 

■ 

If 

ll 

ill 


COP Siebel DB 

11 

Oracle 

X 






SMTP & POP3 

Service in DMZ 


SUN 




X 



Apache (DMZ) 





X 




COP Voyager 
Database 

8.0.5 

Oracle 


X 





Voyager Unicode 

7.2 

Ex Libris 


X 


X 



Tivoli Directory 

Server 

6.2 

IBM 





X 


MetaSearch 


IndexData 






X 

eCO Receipts 


IndexData 








A.1 Hosting Services 


Table 7 - Current AHE Services (eCO) as of October 2011 



'■'Wuntn- UlMInMl 






Application Platform 

LCDC1/LCDC2-Windows 2003-AD 

LTDC1/LTDC2-Windows 2003-AD 

for Windows 

Server 

Server 

applications 

ECOPRDWEBI-Windows 2008-Web 

ECOPREWEB1 -Windows 2008- 


Server 

Web Server 


ECOPRDWEB2-Windows 2008-Web 

ECOPREWEB2-Windows 2008- 


Server 

Web Server 


ECOPRDGTW1 -Windows 2008- 

ECOPREGTWI-WIndows 2008- 


Gateway Server 

Gateway Server 


ECOPRDG7W2-Windows 2008- 

ECOPREGTW2-Windows 2008- 


Gateway Server 

Gateway Server 


ECOPRDAPPI-Windows 2008- 

ECOPREAPPI-Windows 2008- 


Application server 1 

Application senrer 1 


ECOPRDAPP2-Windows 2008- 

ECOPREAPP2-Windows 2008- 


Application Server 2 

Application Server 2 


ECOPRDAPP3-Windows 2008- 

ECOPREAPPS-Windows 2008- 
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^ V- ‘.‘A Vft' 



Application Server 3 

Application Server 3 


ECOPRDAPP4-Windows 2008- 

ECOPREAPP4-Windows 2008- 


Application Server 4 

Application Server 4 


ECOPRDAPPS-Windows 2008- 

ECOPREAPPS-Windows 2008- 


Application Server 5 

Application Server 5 


ECOPRDINTI-Windows 2008- 

ECOPREINTI-Windows 2008- 


Application Server 6 

Application Server 6 


ECOPRDINT2-Windows 2008- 

ECOPRE!NT2™Windows 2008- 


Application Sen/er 7 

Application Server 7 


ECOPRDDOCI-Windows 2008- 

ECOPREDOCI-Windows 2008- 


Application Server 8 

Application Server 8 


ECOPRDDOC2-Windows 2008- 

ECOPREDOC2-Windows 2008- 


Application Server 9 

Application Server 9 


ECOPRDRPTI-Windows 2003-Actuate 

ECOPRERPTI-Windows 2003- 


Report Server 

Actuate Report Server 


ECOPRDRPT2-Windows 2003-Actuate 

ECOPRERPT2-Windows 2003- 


Report Server 

Actuate Report Server 


COPSCAN - Windows 2000-Scanning 

ECOTGTWEBI-Windows 2008- 


and Fax Server 

Web Server 


COPSCAN2 - Windows 2000-Soanning 

ECOTGTWEB2-Windows 2008- 


and Fax Server 

Web Server 


COPLVC - Windows 2003-Adobe 2D 

ECOTSTAPPI-Windows 2008- 


Server 

Application server 1 


COPPRINTSVR - XeroxFreeFlow- 

ECOTSTAPP2-Windows 2008- 


Windows FreeFlow Server 

Application Server 2 

ECOTSTAPP3-Windows 2008- 
Application Server 3 

ECOTSTINTI-Windows 2008- 
Application Server 4 

ECOTSTINT2-Windows 2008- 
Application Server 5 

ECOTSTDOC-Windows 2008- 
Applicatlon Server 6 

ECOTSTRPT-Windows 2003- 
Actuate Report Server 



LiveCycle2-Windows 2003 Adobe 

2D Server 
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Services Servers Utilized (or (Ms fonction fay ttis Hosted Application 


Production * Loctost 






COTSCAN-WIndows 2000 

Scanning and Fax Server 

CODEVAPPI-Windows 2008- 
Application Server 

COOEVAPP2-Windows 2008- 
Appllcation Server 

FREEFLOW - XeroxFreeFlow- 
Windows FreeFlow Server 

Application Platform 
for AiX applications 

CopyeCOI - External Apache Web 
Server 

CopyeC02 - External Apache Web 

Server 

RS21SP - AIX Oracle Server 

RS28 ~ AIX Backup Server 

RS33-AIX LDAP Server 

CopyeCOI - External Apache Web 
Server 

CopyeC02 - External Apache Web 
Server 

RS21SPRE - AIX Oracle Server 

RSORA11GT-AIX Oracle Server 

RS28 - AIX Backup Server 

RS33PRE - AIX LDAP Server 

RSLDAPT - AIX LDAP Server 

Application Platform 
for Solaris 
applications 

SUN4 - SUN MetaSearch Sen/®' 

SUNS - External Mail Server 

SUN21 - SUN Voyager Server 

SUNLAB1 - SUN MetaSearch 

Server 

SUNS - External Mail Server 

SUNLAB1 - SUN Voyager Server 

Application Platform 
for File System 

EMCPROD - EMC Cetera 

EMCTEST-EMC Cetera 
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Appendix B: Backup Schedule 

ITS will provide and retain backups of ttie hosted apf^ication environments in accordance witti ITS’ standard 
backup and retention processes and policies. 


The backup and retention schedule will meet or exceed the following requirements; 


Environment 

DB 

Name 

Frequency 

Retention of Backup 

Notes 

Development 


Daily 

Retain 3 Weeks of 
backup (Min) 

This environment may change 
daily due to multiple (Kojecte 
using this space 

Test 


Once a vreek during CTO testing 

Retain 3 Weeks of 
badcup (Min) 

dba group will need to be 
notified with a support ticket 
vt4ien daily t^dcup is needed 

Training 

S8LY 

Once a week or as decided by Training 
group. 

Retain 3 Weeks of 
backup (Min) 


Pre Prod 

SBNS 

During UAT, daily backup else weekly 

Retain 3 Weeks of 
backup (Min) 

dba grcHjp vwll need to be 
notified vrith a support ticket 
vi4^en daily backup is needed 



Windows Servers; 

Oaily Incremental backup begin at 8:30 
PM through 6 AM 

Windows Servers: 

Daily Incremental kept 
ftx 3 months 




Weekly full backup begin at 8;30 PM 
ttirough 6 AM 

Weekly full backup kept 
for 6 months 


Prod 

SBNP 

Unix Servers: 

Tape: Weekly {Full Backup) 

Disk: Daily Cumulative (daily at night) 
Disk; 3 hours (Inaemental) 

Unix Servers: 

Tape: 3 weeks 

Disk; 3 days 

Disk: 24 Hours 




File System: 30 most recent copies 

File System: Full 
backup monthly kept for 

9 months 



IBIi 


bhhhhhi 


Prod Copy 

SBU 
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1 Introduction 


1.1 Supersedes 

This Memorandum of Understanding (MOU) regarding the DMS Title Profile Query of 
the eCO System between the United States Copyright Office (CO) and the Office of 
Strategic Initiatives (OSI) supersedes all other MOUs concerning Siebel's EAI Query 
Transactions. 


1.2 Revision Schedule 

This MOU will remain in effect baring any changes and/or updates deemed 
necessary as a result of changes in funding, strategic direction, or a review of this 
document by all parties for 6 months. After the initial 6 months the MOU is in 
effect, an analysis will be conducted to determine the query's impact on eCO 
System performance and planned updates to the eCO System and DMS. 

Failure of by any party or stakeholder to comply with policy and procedures 
documented within this MOU may result in a withdrawal of EAI Query Transactions. 

The MOU will be renewed for a year, and will continued to be renewed annually as 
long as the impact to the eCO System performance and operations & maintenance 
activities are minimal. 


1.3 Purpose 

The purpose of this memorandum is to establish a management agreement 
between CO and OSI regarding the management, operation, and maintenance of 
DMS usage of Siebel EAI Query Transactions for Title Profile data. This agreement 
will govern the relationship and allocation of responsibilities between CO and OSI, 
including designated managerial and technical staff, in the absence of common 
management authority, 


1.4 Authority 

The authority for this agreement is based on eDeposit Program Charter, Version 1 
dated March 24, 2010 


1 
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2 Background 


2.1 History 

The Electronic Deposit Program (hereafter referred to as “eDeposit") is part of the 
Library of Congress's long-term goal to acquire electronic works published in the 
United States that fit within the Library's selection criteria through mandatory 
deposit. The program seeks to preserve, secure, and provide access to these works 
in a manner that benefits Congress and the American people while safeguarding the 
rights of, and minimizing the burden to, copyright holders. The eSerials initiative 
supports the Library's Strategic Goal - Sustain an Effective National Copyright 
System and the Library's Enterprise Annual Objective C04 which is a high priority 
initiative for the Library, 

In order to advance efforts to acquire electronic works through mandatory deposit, 
the eDeposit Program will work with Library service units to define internal 
procedures and implement information technology infrastructure and software 
application systems needed to acquire, provide access to, and preserve electronic 
works beginning with electronic serials content in Fiscal Year 2010. The core 
functionality of the system was completed with the release of the eSerials Soft 
Launch in October of 2011 with a subsequent update release completed in May 
2012. 


Currently, the eSerials program has started an initiative for the development and 
implementation of system-to-system functionality allowing larger publishers to 
submit multiple large deposits automatically bypassing the original Soft Launch 
design of an eCO front-door which is single treaded and cumbersome for the larger 
publishers to use. 





2,2 Description of Requirement 

For the eDeposit system to work as intended a title profile is required. The title 
profile provides essential data that identifies a particular publication. This data is 
manually entered into and housed within the eCO System and is currently sent to 
the Delivery Management System (OMS) when the publisher submits a delivery 
through the eCO Front Door, The system-to-system functionality currently under 
development by Office of Strategic Initiatives (OSI) requires the DMS to display 
current live title profile data stored in eCO. 


Specific requirements are: 

■ Any requirement not explicitly described in this document Is out of scope 


2 
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■ implementation of the Siebel EAI DMS Query shall not require any code 
Changes to the eCO System 

■ Implementation of the Siebel EAI DMS Query shall use out-of-the-box 
functionality provided by Siebel 

• A separate EAI Web Connection will be provided to DMS for https queries 

■ The DMS system is limited to 100 transactions per day (+ / - S) 

■ eCO would limit connections to 20 concurrent connections per day 

• Any changes or clarifications to the DMS Query or any requirement 
referenced in this document after formal authorization will follow CTO Change 
Management Practices (see Appendix A) 

• The DMS system shall, via an https query to eCO (as described in section 
1.8), read Title Profile and Status values, import them into DMS, and use 
these live values to process System-to-System files from the publisher into 
SR deliveries 

• eCO will send case data along with title profile and SR status information 

• The eCO System shall provide the DMS system with live Title Prof le and 
Status data to support the review process of SR deliveries by CAD and LS. 

• Mandatory Title Prof le and Status values shall have been entered by CAD 
into eCO prior to the initial delivery. 

• The eCO system must be capable of sustaining a maximum response time of 
15-30 seconds for a maximum of 105 URL queries (testing data: < 1 minute 
for 1000 queries) 

• Where maximum response time exceeds 30 seconds per transaction, CO may 
request that the DMS system halt https queries until performance Issues are 
resolved 

• The eCO system must be capable of sending an immediate error message in 
response to a failed query, i.e. SR/Title not found and/or other errors as 
provided and supported by COTS product. Examples of known error 
messages for dedicated EAI https transactions are provided below, (Actual 
error messages may vary as this transaction is performed by a system, and 
not by a human, via browser). eCO will not provide any custom/specific error 
messages and DMS is expected to handle any exceptions raised through this 
transaction. 

o Internet Explorer cannot display the webpage 

o Unable to connect 

o Can't establish a connection to the server 

o The site could be temporarily unavailable or too busy. Try again in a 
few moments. 

o If your computer or network is protected by a frewall or proxy, make 
sure it is permitted to access the Web. 
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o SR not found; <?xml version="l,0'' encoding = "UTF-8'' 

?>< Response > SR Number Not Found</Response> 
o SOO - Internal server error. There is a problem with the resource you 
are looking for, and it cannot be displayed, 
o The server you are trying to access is either busy or experiencing 
difficulties. Please close the Web browser, open a new tsrowser 
window, and try logging in again 
o Page not found 


2.3 


If the DMS system encounters a timeout error, it shall retry the query the 
following day, based on configuration requirements. Same day retries are 
not possible due to the current 105 queries/day limitation. 

The Siebel EAI Query connection pool will be configured in the eCO test, 

development, preprod, and production environments 

DMS is ngt requesting any changes to current URL eCO http query. 

Example of current test URL: httos;//ecotstweb.loctest,gov/OMSInterface 
/start,swe?SWEExtSource=SRStatus&SVVEExtCmd=Execute8tSWEExtOata = l- 
443988636 


T-t;^ eCO Operations &>lSTn^nance_^egiTt. 4 yili work vyittr^i^I techpiesf-staffts 
resoPcfi^y error’s.<iir^xceptio?ts-««fside orCTO-Gewrol. cv^ 


Assumptions 


■ The DMS http Query for Title Profile Data as documented in this MOU will 
satisfy all of the requirements listed in section 2.2 without any change to the 
eCO System other than the administrative change to setup a separate 
interface connection. 


• The current hardware configuration will support the addition of a new Siebel 
Web Interface Connection. (Otherwise, this MOU becomes null and void) 


2.4 Technical Description of Query 

In order to process initial and subsequent deliveries sent from eCO to DMS, DMS 
needs the SR Status and Title Profile data. The SR Status is required at the time 
the delivery is sent in order to ensure that the correct workflow in DMS is initiated, 
and the Title Profile information is required to help identify the contents of the 
delivery and to associate file names with the current journal/volumes/issues. The 
success of these business processes relies upon the use of live data obtained from 
eCO to maintain data integrity between eCO and DMS. The current eCO Front Door 
process sends the case information XML to the DMS when the case is approved by 
CAD in eCO Public Sector and the title profile information XML to DMS when the 
publisher pushes a delivery through the Front Door. 
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The objective is to apply this established process, in just-in-time, to System to 
System. System to System is a backdoor delivery process whereby publishers push 
content to an ingest file-system on a Library of Congress server, set up for that 
purpose, and DM5/CTS processes those files into distinct SR deliveries for ingest 
into DMS and review by CAD and Library Services Acquisition staff. 

The following eCO Title Profile fields, including Status, are currently automatically 
sent by eCO as an xml notification to DMS, when CAD approves a Demand to a 
publisher, and when the publisher loads a delivery to the front door only. 

. ISSN 
. Title 

• Subtitle 

• PartlMame 

• PartNumber 
. Fuimtle 

• SRNu.mber 

• Status 

• Publisher 
t CaseNum 

• CaseStatus 

• CaseSubStatus 

• Article Format 

• Other Article Formats 

• Article Publication Comments 

• Article Publication Pattern 

• Bibliographic Metadata Format 

• Issue Fo.''mat 

• Issue Publication Comments 

• Issue Publication Pattern 

• Package Delivery Comments 

• Package Delivery Pattern 

• Packaging Format 

• Package Manifest Available 
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• Package Manifest Filename 

• Package Description 

• Package Naming Pattern 

• TOC Available 

• TOC Filename 

• Volume Publication Comments 

• Volume Publication Pattern 

• File Location 

• Terms Of Use 

• Issues Requested 
. URL 


In each case, eCO sends an http request containing an XML structure to DMS. DMS 
validates, parses, and stores the data for display to users in its interface. There Is 
error handling and logging at each step. 

For System to System, DMS will query eCO using a separate Siebel Web Interface 
Connection. 


2.5 Architecture 



1. DMS Sends a https request to eCO using URL: 

https ://[£r)vironment]/DMSlnterface/start.swe?SWeExtSource=SRStatus&S 
WEExtCmd=£xecute&S W££xtData=[SR Number } 

Where; 

Environment = eCO internal URL specific to environment 
SR Number = Service Request Number 


2. Load balanced eCO web servers receives the request and sends it to eCO 
application servers 
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3. Load balanced eCO application servers receives the request, process it by 
connecting to database and responds back with the below XML 

If SR number is not correct, DMS will receive response from eCO as: 
<?xml version="1.0" encoding="UTF-8'' ?><hl>SR Number Not Found</hl> 

If SR number Is correct, DMS will receive response from eCO as: 

<?xml version="l,0" encoding=“UTF-8"?> 

<Title> 

<ISSN></rSSN> 

<Title>Primary Title</Title> 

<Subtitle> Primary Subtitle </Subtitle> 

<PartName>Part # for Primary Part Name</PartName> 
<PartNumbef></PartNumber> 

<FuliTitle></FullTitle> 

<SRNumber> </SRNumber> 

<Status>Open</Status> 

<Publisher> </Publisher> 

<CaseNum></CaseNum> 

<CaseStatus>Closed</CaseStatus> 

<CaseSubStatus> </CaseSubStatus> 

<Bibliographic><Article_Format> 

</Article_Format> < Other_Article_Formats > 

</Other„Afticle_Formats> 

<Afticle_Publication_Comments></Article_Publication_Comments> 

<Article_Publication_Pattern></Article_Publication_Pattern> 

<Bibliographic_Metadata_Format></8ibliographic_Metadata_Format> 

< [ssue_Format> </Issue_Format> 

<Issue_Publication_Comments></Issue_Publication__Comments> 

<Issue_Publlcation_Pattern></Issue_Publication_Pattern> 

<Package_Delivery_Comments></Package_DelivefY_Comments> 

<Package_DeliverY_Pattern></Package_Oeliverv_Pattern> 
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< Packaging_Format> </Packaging_Format> 

<Package_Manifest_Avai!abie></Package_Manifest_Available> 

<Package_Manifest_Filename></PackaQe_Manifest_Filename> 

<Package_De5crIption></Package_Descriptian> 

<Package_Naming_Pattern></Package_N3nning_Pattern> 

<TOC_Available></TOC_Available> 

<TOC_Filename></TOC._Fiiename> 

<Volufne„Pubtication_Comments></Volume_Publication_Comments> 

<Volume_Publication_Pattern></Volume_Publication_Pattern> 

<FileLocation></FileLocation> 

<Terms_Of_Use></Terms_Of_Use> 

<Issues__Requested></lssues_Requested> 

<URL></URL> 

</8ibliographic> 

</Title> 


3 Impact on eCO System 

This functionality affects two web servers, two integration servers, and 
database server. Given the high availability and load balanced, architecture of 
application/web server and a dedicated database server in production, major 
impact is not anticipated. To substantiate, testing similar functionality in 
development environment reveals no performance impact where it took less than a 
minute for 1,000 queries. 

To eliminate any concerns, O&M will create monitoring scripts for component 
availability as well as watch for DBA's alert on long running queries. If the DMS 
query is running for prolonged time (triggers a DB alert), 0&.M team will terminate 
the job and alert CTC^accordingly. 

4 Roles and Responsibiuties 


4.1 Query Design 

CO will configure the Siebel Web Interface connection to meet the requirements as 
described in this document. 
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OSl will configure the DMS http query within the constraints documented in the 
requirements section (Section 2.2). 

OS] will configure errors and alerts when the constraints documented In the 
requirements section (Section 2.2) are about to be exceeded, 


4.2 Change Management 

All changes to the eCO System will follow official Change Management (CM) 
practices (See Appendix A). DMS representatives will have the opportunity to 
participate during the CM review, impact, and testing activities.'^ 

All changes to DMS will follow/ the established Change Management (CM) practices 
(See Appendix B). ECO System representatives will have the opportunity to 
participate during the CM review, impact, and testing activities. 


4.3 Requests to stop Query 

If there exists the opportunity for unprecedented usage of the eCO System (such as 
last minute submissions prior to an increase in fees) or there is evidence to suggest 
performance issues related to the DMS Query, the CO may temporarily suspend the 
DMS Query until anticipated peak usage subsides or performance issues are 
resolved. 

The DMS Query will be suspended by OSI until authorization by CO has been given 
to proceed. 


4.4 Procedures 

• OSI will follow CTO policies and procedures for anything related to the eCO 
System. 

• CO will follow OSI policies and procedures for anything related to DMS. 

• CO and OSI will document Standard Operating Procedures (SOPs) for those 
areas where both parties have responsibilities. These SOPs shall define all of 
the steps to complete a particular activity and which group is responsible for 
each task within the activity. The following SOPs are included in this MOU 

o eCO Change Management SOP 


* CTO has a centralized CM Process that supports all production systems, including eCO. 

' CTO has an Emergency CM Process that is not included in this MOU, but appiies to all 
emergency releases (including eCO System). 
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o DMS Configuration Management Plan 
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5 Communication 

5.1 Procedures 


Frequent formal and informal communications are essential to ensure the successful 
management and operation of the Siebel Web Interface transactions. The parties 
agree to maintain open lines of communication between designated staff at both 
the managerial and technical levels. 

Electronic written communication is the preferred method of communication and all 
decisions should be documented. The two parties agree to designate, provide, and 
maintain contact information for management and technical leads for the eCO 
System and OMS. 

Furthermore: 

1. Copyright Acquisitions Division will notify eCO and DMS designated staff 
when initial deliveries are expected. 

2. With the exception of emergency situations, CTO will provide at ieast five (5) 
business days advance notification of eCO System outages due to scheduled 
regularly maintenance. 

3. With the exception of emergency situations, CTO will provide at least five (5) 
business days advance notification where situations warrant suspended use 
of the Siebel Web Interface Transactions. 

4. Changes to either system will be communicated as defined in the system's 
CM plan (See Appendix A). 


Primary Contacts within Scope of this MOU 


CO Primary Contact 

Jacqueline Smith 

7-7349 

jsmithigiioc.gov 

i OSI Primary Contact 

Anupama Rai 

7-3619 

arai@ioc.gov 

CTO Technical Lead 

Jerry Tuben 

7-5293 

jtub@loc.gov 

eCO Technical Lead 

Vijay Alan 

7-7304 

valan@loc. 90 v 

DMS Technical Lead 

Tong Wang 

7-9742 

twan@loc.gov 

CAD Representative 

Stephen Want 

7-6781 

swant@loc.gov ' 

LS Representative 

Emily Howie 

7-5771 

emho®loc.aov 

CTO COP/ISSO 

Jannie Grant-Gilius 

7-1716 

jgrant@loc.gov 
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To safeguard the integrity and availability of the applications and data stored, the 
parties agree to provide notice of specific events within the tirneframes indicated in 
the sections below: (4. 1-4.4) 


5.2 Meetings 

The primary means of communication to deal with complex issues shall be 

meetings. Both parties agree to the following: 

• Meetings on urgent (emergency) issues will require immediate action 

■ Either party can call for a meeting 

• The meeting request must include the type (routine or urgent) and the 
reason for the meeting 

• The party calling the meeting will provide a written agenda prior to the 
meeting. They will also provide a written summary of the meeting reflecting 
the topics discussed, the major points of discussion within each topic, and all 
decisions or conclusions reached 

• On an annual basis, at a minimum, the parties will meet and discuss the MOU 
with the goal of updating it as necessary. 


S.3 Security Incidents 

DMS and/or eCO technical staff will notify their designated counterparts and the 
ISSO when a suspected security threat is detected (for either system), so that 
they may assist in determining whether the system (eCO or DMS) or any of its 
subcomponents has been compromised anti take appropriate security 
precautions. The ISSO will notify the LCSOC or other appropriate personnel per 
current LC security policies and procedures. Telephone contacts will be 
immediately documented in a follow-up email. The primary contacts listed in 
the table in section 4 will receive formal notifications within five (5) business 
days after detection of the incident(s). 


5.4 Disasters and Other Contingencies 

Technical staff will immediately notify their designated counterparts in the event 
of a disaster or other contingency that disrupts the normal operation of one or 
both of the systems. In addition, the event should be handled in accordance 
with the incident response SOP and/or COOP/DR Plans for the respective 
system. 
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5.5 Personnel Changes 

The parties agree to provide written notification of the separation or long-term 
absence of their respective system primary contacts (section 4). In addition, 
both parties will provide notification of any changes in point of contact 
information. 


5.6 Suspension 

Should the use of the Siebel Web Interface Transactions by OMS demonstrate a 
negative impact on the production of the eCO System's performance or the 
ability of CTO (or DMS) to conduct planned updates - the connection may be 
suspended until performance and other issues have been addressed. 

In these cases, CO wilt provide at least five (5) business days advance 
notification of the suspension, 


6 Cost Considerations 

Any future effort that requires CTO contract resources will require additional 
funding and a separate task or contract vehicle. The scope for the current 
contracts supporting the eCO System does not include any effort to support 
eDeposit related functionality, 


7 Change & Configuration Management 

Any changes to the eCO System or DMS will be communicated between CTO and 
OSI primary contacts to identify the impact of the change. 

Any change, with the exception of emergency security changes needed to stop an 
immediate security threat, will be implemented in a development, test & pre- 
production environments, and tested successfully by all parties before 
implementation in production. 

CO will operate under change and configuration management processes to manage 
changes to the eCO System, DMS will participate in these processes as 
appropriate. (See Appendix A - eCO Change Management SPO). 

OSI will operate under change and configuration management processes to manage 
changes to the OMS. CO will participate in these processes as appropriate. (See 
Appendix B - DMS Configuration Management Plan). 

Any changes made to the hosted production environment must adhere to the ITS 
Configuration Management Process. 
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7.1 Material Changes to the Application Configuration 

A material change is defined as a substantial configuration change to one system 
that will impact the other system, When either the CO or OSI identifies a change 
that may impact their counterparts, this change should be communicated in writing 
at least one (1) month prior to testing and scheduled implementation of the 
proposed change. The initiating party agrees to conduct a risk assessment based 
on the new system architecture (or configuration) and to brief their counterparts 
one (1) month prior to implementation. Notice of a change does not guarantee that 
the change will be approved for implementation. All changes shall follow the 
established CM process for the system impacted by the change. 


7.2 Emergency Configuration Changes 

Emergency changes are defined as those that are necessary to ensure that the 
application continues to fulfi!! its mission. While these changes are generally not 
material In nature, emergency changes that are material can be made unilaterally, 
but must be immediately followed up within 15 minutes with an email message and 
phone call to the primary contact. Within 24 hours, a written notice must be 
delivered to the other party and an emergency meeting must be called to discuss 
the change(s). 
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Appendix A - CTO Change Management Process SOP 



LIBRARY OF 
CONGRESS 



Copyright CTO 

Change Management Process 


Version 1.1 
September 6, 2011 
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The Change Management Process provides the Copyright Technology Office (CTO) 
with a method of controlling and monitoring configuration changes within systems 
and the Copyright environment. The Change Management process covers the 
management of software, databases, hardware, and applications in Copyright, 
Change is defined as any activity that alters the physical configuration of a 
baselined system or component and how it operates. The key objectives of the 
Change Management (CM) process are to: 

• Identify changes in advance and control and manage them; 

• Ensure that requested changes are justified, and that affected systems and 
deliverables are Identified and modified accordingly; 

• Reduce errors, defects, and unplanned outages due to changes in the 
environment; 

• Obtain authorization to proceed with the changes and assign them to 
appropriate individuals to be facilitated; 

t Monitor the progress of the changes and ensure closure; 

• Execute a structured process that keeps everyone informed on technology 
changes in the environment; 

• Document the system for future supportability 


2. Roles and Responsibilities 


1 Role j 

1 Responsibility 

Requestor 

• Vets all requests through the appropriate management chain in 
their oflice before submission 

• Submits the Request For Change (RFC) to the CTO CM 
Administrator 

• Provides supporting documentation as needed or when requested 

• Note: Requestor could be anyone (e.g., internal lo the helpdesk, 
internal to CTO, from an external department, a customer, or end- 
user, etc...) 

CTO Staff 

• Modify RFC content and supporting documentation 

• Work with the Change Manager. IR8, and eCO Release Manager 
to determine severity, scope, impact and risks 

• Provide Subject Matter Expertise (SME) 

• Provide project planning and testing 

• Coordinate with Information Technology Services (ITS) 

• Assist in communicating status to the Requestor 

• Serve in various roles within the process (i.e., Release Manager, 
Change Manager, IRB member, Analyst, SME, etc...) 
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Role 

Responsibility 

Change Manager 

• Triage, update, and manage all RFC 

• Assign RFCs to an Analyst lor review and analysis of the problem 
and requirements definition as needed 

• Move RFCs through the CM process 

• Facilitate the validation, classification, prioritization and approval of 
RFCs 

• Coordinate the content and agenda for the Internal Review Board 
(IRB) meetings 

• Coordinate communication throughout the process 

• Coordinate and expedite emergency requests 

• Review final Release in order to ensure that RFC requirements are 
met and update CMDB accordingly 

CTO Analyst 

• Validate & update the RFC content and supporting documentation 

• Work with business and technical SMEs (including requester) as 
well as the Development Team to define detail requirements 

• Provide CM liaison support to Copyright Offices 

CTO IRB Board 

• Evaluate & review RFC for impacts on the environment (e.g. 
system security, data integrity, system archilecture, system design, 
data model, impact on other processes that share components, 
etc,) 

• Approve (if a voting member) RFC for disposition 

• Ensure that requirements, test plans, rollback procedures, etc... 
are complete and in order to proceed to the rtext phase of the 
process 

• Act in accordance with the CTO IRB Charter 

• Provide SME support and/or resources as needed 

ITS Resource 

» Support the CM process as needed 

• Coordinate or act as Infrastructure SME when RFC components 
impact Infrastructure operations 

• Facilitate the communication between CTO and ITS resources 

• Coordinate ITS resource availability 

eCO Steering 
Committee Member 

• Coordinate through the eCO Release Manager 

• Determine final scope of eCO software releases with respect to 
enhancement or maintenance changes to the eCO system 

• Act in accordance with the CTO Steering Committee Charter 
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Role I 

1 Responsibility I 

Software 

Development Team 
Member 

• Develop, test, and implement eCO software changes 

• Develop, test, and implement eCO administrative changes 

• Assist in identifying RFC impacts to the system 

• Communicate additional requirements to the Analyst, IR8, or 
Change Manager 

• Provide SME support as needed 

• Provide supporting documentation as needed 

O&M Group Member 

• Plan, test or coordinate the implementation of changes 

• Assist in identifying RFC impacts to the system 

• Communicate additional requirements to appropriate parties and 
CTO Manager(s) 

• Provide SME support as needed 

• Ensure that documentation is kept up-to-date and/or provide 
supporting documentation as needed 


3 Entry Criteria and Inputs 

3.1 Entry Criteria 

This process starts when a Request For Change (RFC) is submitted for consideration 
by a Requester. 
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4 Process Steps 

The CTO change Management Process is outlined in Figure 1. 

CTO Chang* Mana9«iatnt %oeM« Flow 



As the RFC moves through the Configuration Management (CM) workflow, its 
associated status code will change to reflect where it is located within the process 
workflow. When the RFC is submitted initially, the status will automatically be set 
to "S'Submitted." 

The following table defines all of the various RFC status codes, and what each one 
represents: 


1 Code 

Name 

Description I 

1 S 

Submitted 

Request submitted by requestor, but not reviewed yet by the 
IRB 

i n 

Requirements 

Request updated with full justification, requirements, and 


Compiete 

j 

supporting documentation 
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1 Code 

Name 

Description I 

"A 1 

Approved 

Request approved by the IRB 

D 

Declined 

Request not approved by the IRB 

P 

Pending 

Request approved by IRS, waiting to be scheduled by eCO i 
steering committee or CTO management for scheduling 

H 

Hold 

Request put on hold 

C 

Scheduled 

Request scheduled and has an assigned date for 
implementation 


Implemented 

Request has been implemented 

w 

Withdrawn 

Request canceled by Requestor or Overcome By Events 
(OBE) 




Table 1 - RFC Status Cades 


4.1 Request For Change (RFC) submitted 

All Copyright Request For Change (RFC) forms (RFCs) are submitted, logged, and 
tracked through the CTO Administrator. The Requester may be Copyright staff, 

CTO staff, other Library of Congress (LOG) staff, or external customers & partners. 
In this initial stage the change request status is "S-Submitted." 

4.2 RFC In CMDB 

The information on the Copyright Request for Change (RFC) form is Imported into 
the Change Management Database (CMDB) for tracking by a designated member of 
the CTO staff. 

4.3 Change Manager Triage RFC 

The RFC is then sent to the Change Manager for review, update. The Change 
Manager must review each RFC and determine if the information submitted is 
complete in order to move to the next step. Once this is complete, the RFC will be 
assigned to a CTO Analyst to validate and further develop the requirements. 


4.4 Analyst Update RFC 

The Analyst will review the submitted RFC and determine the following at a 
minimum: 


1 Analysis Areas 

Description 

Breakdown I 

Validity 

1 

Is the described problem 
really a fault? 

1. User error 

2. Desktop 
Environment 

3. AHE Issues 1 

4. External systems 
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Analysis Areas 

Description 

Breakdown I 


: 

failure (e.g. 
Pay.Govj 

Requirements/Description 

Description of the change 
and the detail 
requirements both 
technical and business 

1. UI change/process 
flow Change/Data 
change 

2. Navigation (Bus 
Object, Screen, 
View, etc,..) 

3. Business 
requirements 

4. Technical 
requirements 

Rationale 

Sound justification for the 
requirement 

1. Need vs. want 

2. Driving factors 

3. ROI or value to 
organization 

Root Cause 

■ 

What sequence of 
events lead up to the 
request? 

What conditions allowed 
the event to occur? 

What risks could be 
caused by the event? 

1. Identify potential 
risks 

2. Develop 

preventive action 

3. Identify root 
causes 

4. Identify further 
risks 

Source 

Who raised this 
requirement and does it 
have management 
approval? Is all the 
contact information 
available? 

1. Business Owner or 
Technical Owner 

2. Business unit 

3. Contact 

I 

Dependencies 

List of other requirements 
that have some 
dependencies or interfaces 

1. Impact on process ; 
flow (sub- 
systems, other 
business areas 
impacted 

2. Impact on Existing ; 

data 1 

3. Impact of data 
structure 

4. Impact on 
organization 
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Analysts Areas 

Description 

Breakdown 1 

Support Material 

Updated supporting 
material to assist in 
defining the change. 

Screen prints, logs, 
error messages, 
white papers, 
conceptual design 
docs, process 
workflow, "To Be" 1 

documentation, etc... \ 

History 

Background on change 

Created, changed, ] 

deleted, etc,., 1 

Severity 

What is the urgency of the 
change 

4= Emergency 1 

3=High (Priority) 
2=Medium (Maint.) 
l = Low (Maint) 

Type of Change 

What is being requested? 

1. Defect/Error 

2. Documentation 

3. General Question 

4. New Functionality 

5. Performance issue 

6. Training 

7. Other 

Level of Effort 

1 

i 

i 

What is required to 
implement this change? 

1. Hours requirement , 

2. Additional 
Software/Hardwar 
€ requirements 

3. Skills set 
requirements 


The CTO Analyst may, and often will, work with the Requester and the cognizant 
area SME to determine this information. When all of these items have been 
addressed, the Change Manager is notified that the Change Request is ready for 
CTO IRB Review. 

4,5 Update RFC in CMOS 

After the analyst completes the full requirement gathering and analysis, the Change 
Manager must review the data and determine if the submission is ready for CTO 
IRB review. Once the requirement gathering is complete the RFC is placed in "R- 
Reqjuirements Complete" status. The RFC is updated with the additional 
information, reviewed by security, and submitted to the CTO IRB for review on the 
Copyright Change Management Form (IRB CMF). 
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4.6 CTO IRB to Review RFC 

Once the RFC has been passed to the CTO IRB on the Copyright Change 
Management Form (CMF), the CTO IRB must review the RFC and ensure that the 
requirements and supporting documentation are complete and the change is 
technically sound before assigning it further resources or passing it onto the 
appropriate group for implementation. 

Once the RFC is reviewed by the IRB, the Change Manager will update the status of 
the RFC within the CMOS to either ”A-Approved", "D-Declined", or "H-Hold" and 
ensure any additional information requested by the CTO IRB is obtained. 

If the RFC status is set to "A-Approved", then the Change Manager will route it for 
prioritization or planning. If it is eCO related and it involves functional maintenance 
or feature enhancement, then it is sent forth to the eCO Steering Committee and 
prioritized for incorporation into the eCO system. Otherwise, it is reviewed by the 
IRB and expediited for incorporation into the eCO system. If it is not eCO related at 
ail, it is sent forth to CTO or ITS for additional planning and implementation. 

If the RFC status is set to "D-Declined" or "H-Hold", then it is routed back to the 
Change Manager to notify the Requester. When the RFC is given a "H-Hold" status 
designation, this usually indicates that the information provided to the CTO IRB was 
incomplete or erroneous. In these cases, the Change Manager will re-assign the 
RFC to an analyst who, in turn, will work with the Requester and the appropriate 
SME(s) to further define and clarify the RFC or its information. 

In some Instances, the RFC may be Overcome By Events (OBE) or the requester 
may choose to cancel the RFC. When this occurs, the RFC status is set to "W- 
Withdrawn" within the CMOS. This may occur at any stage of the Change 
Management process. 

4.7 eCO Steering Committee Prioritize Changes and Set Scope 

If the approved change constitutes an enhancement to the eCO system or it 
encompasses maintenance items which are not high severity, then the Change 
Request is prioritized as part of a software scope exercise overseen by the eCO 
Steering Committee and the eCO Software Release Manager. Each RFC is then 
assigned to an upcoming release or put into a list for consideration in the next 
release. 

The RFC is given a status of "P-Pending" or "C-Scheduied" depending on how the 
eCO Steering committee prioritizes the RFCs. 

4.8 ITS Lifecycle Approval Request 

If ITS support is required, the project manager must submit a CR request to the 
ITS WCC in accordance with the ITS Lifecycle Workflow. The RFC is given a status 
of "P-Pending" or "C-Scheduled" depending on the severity. 
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4.9 Provide Planning and Technical Support (ITS) 

If ITS support is required, then an assigned CTO resource will work with ITS to 
plan, schedule, and incorporate the change into production. The ITS group will 
provide planning, and technical support as needed in accordance with the governing 
MOU and the ITS CM process, In the event that a MOU does not exist, the ITS 
group will provide inputs into the charter or project plan as required by CTO 
management. 

4.10 Project Planning and Test (CTO) 

All RFCs will be assigned to a Project Manager (PrM) within CTO to incorporate into 
a current project or to address as a new project. The RFC is given a status of "P- 
Pending" or "C-Scheduled" depending on the severity. The assigned Project 
Manager (PrM) must work with the staff and contractors to implement the change 
to the system or hardware. 

4.11 CTO IRB Prioritize Changes and Set Scope 

If the approved eCO-related RFC is classified as an emergency fix, it encompasses 
fiscal and data integrity items, it is regulatory in nature, or it resolves a problem 
which hampers production then the Change Request falls under the purview of the 
CTO IRB and the eCO Software Release Manager for planning and prioritization. 

The RFC is given a status of "C-Scheduled". 

4.12 eCO Software Development Group Development and Test 

As each release scope is finalized through the eCO Steering Committee and the eCO 
Release Manager, the list of RFC and the associated requirements are provided to 
the eCO Software Development Group to design and test in accordance with the 
software development cycle (SDLC). At this point the RFC Status has already been 
assigned a status of "C-Scheduled" during planning and prioritization. Before the 
software is released, it must be reviewed against the requirements in accordance 
with the System Readiness Review (SRR) procedure. 

4.13 eCO O&M Group Provides Release Changes / Documentation 

The eCO O&M group provides the release-associated documentation to CTO for 
distribution. In addition, the eCO O&M group updates and submits the system 
documentation to the IRB for acceptance. 

4.14 eCO Software Release 

The eCO software is provided to the ITS group to migrate to production lAW the 
eCO Software Release Standard Operating Procedure (SOP) and the ITS Change 
Management Process. 
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4.15 Changes Released into Production 

Upon completion of the software development & test or project planning & test 
phases the RFC and associated documentation are migrated to production in 
accordance with Standard Operating Procedures (SOP) and the ITS or CTO Change 
Management Process. 

4.16 Review Release 

Any required closeout documentation is submitted to the Change Manager and the 
RFC status is changed to "I- Implemented" by the Change Manager. 


5. Exit Criteria and Outputs 

5.1 Exit Criteria 

The process is complete when the requester is satisfied that the implemented 
solution addresses the RFC that was submitted and an After Action Report is 
submitted that details that the RFC has been successfully Implemented. The change 
is also considered complete if a Requestor submits a request to withdraw the 
change ("W-Withdrawn") or the CTO IRB declines to implement the change ("D- 
Declined"). In both cases the Change Manager will communicate the RFC closure 
to the Requester and update the RFC Status within the CMDB. 

5.2 Outputs 

The following is a list of artifacts that are generated during Change Management 
process: 

• Request For Change Form (RFC) 

• Record Entry in the CMDB 

• IRB Change Management Form (CMF) 

• IRB Change Management Agenda 

• Analysis Documentation 

• Technical Change Documentation 

o Test Plans 
o Rollback Plans 

o Updated Software or HW Configuration 
o Installation Procedures 
o Network Diagrams 

o etc... 

• Artifacts demonstrating approval of RFC (email, minutes or signature sheet) 

• Artifacts demonstrating approval of solution implementation (email, minutes 
or signature sheet) 

• After Action Report S. Results 

• Test Report & Results 
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• Updated eCO SDD (if required) 

• Updated eCO dictionary (if required) 

• Analysis documentation Including sign-offs 

• Updated CTO Product Documentation (Certificate specification, public record 
documentation, etc) 

6 Related Assets 

6.1 CTO Documentation 

• CTO IRB Charter 

• eCO Steering Committee Charter 

• Project Management Plans 

• Project Charters 

• eCO Software Release Standard Operating Procedure (SOP) 

6.2 ITS Documentation 

• ITS Change Management Process 

6.3 Other 

• CTO/rrs Memorandum of Understanding (MOU) 

7. Measurements 

No metrics will be collected for this process. In the future, suggested metrics might 
be: 

• Number of Submitted RFCs categorized by department and severity 
t Number of RFCs categorized by CR/PR and Department 

• Number of RFCs categorized by RFC Status Category 

• Number of Implemented RFCs 

• Average Age of Submitted RFCs 

• Average Age of Pending RFCs 

8, Process Verification 

The following artifacts will serve as indication that the process has been 
successfully completed: 

• Entry in the CMDB 

• Artifact demonstrating approval of RFC (email, minutes or signature sheet) 

• Artifact demonstrating approval of solution implementation (email, minutes 
or signature sheet) 
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9. Training 

No additional training is required for this process. It is recommended that all staff 
involved in the process familiarize themselves with the steps. Additional questions 
regarding this process can be submitted to the Change Manager. 


10 Acronyms 


1 Acronym 

Description I 

CMDB 


CM 

Change Manaqement/Change Manager 

CMF 

Change Management Form 

CR 

Change Request 

CTO 

Copyright Technology Office 

eCO 

Electronic Copyright Office 

lAW 

In Accordance With 

IRB 

Internal Review Board 

ITS 

Integrated Technical Services 

MOU 

Memorandum of Understanding 

OBE 

Overcome by Events 

PR 

Problem Report 

PrM 

Project Manager 

RCF 

Request for Change 

SME 

Subject Matter Expert 

SOP 

Standard Operating Procedure 
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Appendix B - DMS Change Management Process SOP 
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1 INTRODUCTION 

The purpose of this Configuration Management Plan (CMP) is to identify, define and 
describe the configuration management process for the Delivery Management 
Services (DMS), This plan should be used as a guideline on the process of how 
changes should occur. 

1.1 Delivery Management Service (DMS) 

The goal for the Delivery Management Service (DMS) is to support the viewing of 
deliveries, and the processing of those deliveries necessary for addition of the 
eSerial content to the Library's collections via the eDeposit for eSerials program, 
and to manage access to those files. DMS stores all descriptive and rights 
metadata that associates files with digital objects, e.g., journals, volumes, issues, 
and articles, as well as tracing files back to Copyright Service Requests. DMS 
enables collection management and preservation functions, as well as basic 
reporting. 

DMS consists of a Django web application with a mySQL database, which will run in 
the Library of Congress production application hosting environment, specifically the 
Sun31 server, with content copied Co long-term storage on the Sun29 STK Tape 
Library 8500. 

1.2 Scope 

The CMP covers all changes that are made to Delivery Management Service (DMS) 
and related documentation. Additionally, all configuration and certification and 
accreditation documentation related to these systems is under the control of this 
CMP. The specific items under control of this CMP are: 

• Django web application 

• mySQL database 

2 ROLES & RESPONSXBIUTIES 

2.1 Change Agent 

The change agent is defined as any person or group submitting a request to make a 
modification to any element under configuration management via this configuration 
management plan. This includes configurations and documentation. All DMS 
development staff are responsible for documenting and utilizing the standardized 
change management procedures in this CMP in the execution of their duties. 

2.2 Information System Security Officer/Configuration Manager 

The DMS ISSO/Confguration Manager reviews and makes recommendations 
concerning Change Requests (CRs) in terms of security risk that a given change 
would pose to the system. The ISSO is responsible for evaluating potential risk and 
making a recommendation to the Change Control Board (CCB), Additionally, the 
ISSO/Configuration Manager is responsible for initiating any update of the 
certification documentation and notifying the Information System Security Manager 
(ISSM) and Certification Official (CO) of changes to any certified system that would 
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materially alter the security posture of the system. Examples of this are adding 
new networked applications with different functions. 

2.3 Change Control Board 

The DMS Change Control Board (CCB) is responsible for ensuring any element 
under this CMP is managed and operated in accordance with IT Security directives. 
The CCB is comprised of the DMS Development Project Manager, a representative 
from the ILS Systems Office, and a representative of the ABA division in Library 
Services. The DMS Development Project Manager may expand the CCB as required 
or delegate approval of a given Change Request as needed. The DMS Development 
Project Manager makes the final approval on any Change Request, DMS 
Development Project Manager can override the ISSO/Configuration Manager, 
though this must be clearly documented, 

2.4 Documentation Configuration Manager 

The Documentation Configuration Manager is the individual who ensures that 
documentation is consistent. The Documentation Configuration Manager is not 
responsible for creating the document content. The ISSO/Confguration Manager 
can also fulfil this role. 

3 Configuration management Process 

All changes to any element covered by this CMP must have a Change Request (CR) 
associated with any changes. There are two types of CRs, 

• Change Request 

• Emergency Change Request 

3.1 Change Request 

All planned changes must utilize the Change Request process. This process is 
described below and shown in Figure 2 - Change Request Process . 

1. Submit Change Request (CR) 

Submit the CR by completing the form provided in Appendix A - Chance 
Request Form and attaching the form to a work reporting system 
(currently Remedy) request, assigned to the designated CR Confguration 
Manager. Lab testing results are required for all major system changes. The 
ISSO or CCB may reject the CR if there was not adequate testing. 

For new software and hardware, the CR form is used and the following 
information is attached: 

• Implementation Plan (includes rollback) 

• Hardware/Software maintenance contract 

• Documentation of changes per the ITS SOLC 

2. Security Review 
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materially alter the security posture of the system. Examples of this are adding 
new networked applications with different functions. 

2.3 Change Control Board 

The DMS Change Controi Board (CCB) is responsible for ensuring any element 
under this CMP Is managed and operated in accordance with IT Security directives. 
The CCB is comprised of the DMS Development Project Manager, a representative 
from the ILS Systems Office, and a representative of the ABA division in Library 
Services. The DMS Development Project Manager may expafid the CCB as required 
or delegate approval of a given Change Request as needed. The DMS Development 
Project Manager makes the final approval on any Change Request. DMS 
Development Projea Manager can override the ISSO/Configuration Manager, 
though this must be clearly documented. 

2.4 Documentation Configuration Manager 

The Documentation Configuration Manager is the individual who ensures that 
documentation is consistent. The Documentation Configuration Manager is not 
responsible for creating the document content. The ISSO/Configuration Manager 
can also fulfill this role. 

3 Configuration Management Process 

All changes to any element covered by this CMP must have a Change Request (CR) 
associated with any changes. There are two types of CRs. 

• Change Request 

• Emergency Change Request 

3.1 Change Request 

All planned changes must utilize the Change Request process. This process is 
described below and shown in Figure 2 - Change Request Process . 

1. Submit Change Request (CR) 

Submit the CR by completing the form provided in Appendix A - Change 
Request Form and attaching the form to a work reporting system 
(currently Remedy) request, assigned to the designated CR Configuration 
Manager. Lab testing results are required for all major system changes. The 
ISSO or CCB may reject the CR if there was not adequate testing. 

For new software and hardware, the CR form is used and the following 
information is attached: 

• Implementation Plan (includes rollback) 

• Hardware/Software maintenance contract 

• Documentation of changes per the ITS SDLC 

2. Security Review 
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The ISSO/Configuration Manager will review the CR to determine what, if any 
impact the proposed change will have on the system and its associated C&A 
package. The ISSO/Configuration Manager may make a positive or negative 
recommendation. The reason for a negative recommendation must be 
documented in the CR, Regardless of the ISSO/Configuration Manager's 
recommendation, the CR, with the ISSO/Configuration Manager's comments 
is forwarded to the CCB. 

3. CCB Review 

The CCB will review the CR to determine what, if any impact the proposed 
change will have to the system on operations. The CCB may approve or 
deny the request. The reason for denial must be documented in the CR. 
Moreover, the ISSO/Configuration Manager may override the 
recommendation of the ISSO/Configuration Manager, If the 
ISSO/Configuration Manager's recommendation is overridden, the reason 
must be documented in the CR. 

4. Perform Update 

The DMS Development Project Manager will assign a responsible party to 
perform the system update in accordance with DMS Standard Operating 
Procedures. Note that certain changes do not affect any production system, 
but are instead changes to documentation covered by this CMP. 

5. Update Documentation 

Prepare any documentation updates. Documentation updates may include 
an entirely new version of the document or an updated section, table or 
diagram. In the case of an updated section, table or diagram, ensure that 
the update contains the proper section/figure/table number and labeling. 
Documentation updates are forwarded to the Documentation Configuration 
Manager. 

6. Update DMS Document Repository 

The Documentation Configuration Manager will ensure that the 
documentation is correctly updated and tracked by updati.ng and formatting 
the particular document and filling out the DMS Tracking Sheet, 

Figure 2 - Change Request Process 
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Wsdnesiiav, May OS. 20« . L,i- CTS CM Process fo r DMS-Dependent Tickets 






3.2 Emergency Changes 

Emergency Changes are performed to enable a non-opcrational system to become 
operational or to mitigate a newly discovered, high-risk, vulnerability. The 
following type of changes cannot be designated as Emergency Changes: 

• Changes that solely apply to documentation 

• Addition of software or hardware 

• Removal of software or hardware 

This emergency change process follows the same process as a standard Change 
review, with shorter timeframes, 

1. Perform Update 

Perform the system update in accordance with DMS Standard Operating 
Procedures. 
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2. Submit Change Request (CR) 

Within 24 hours of performing the change, submit the CR using the form 

attachment to a work reporting system (Remedy) request assigned to the CR 
Configuration Manager. Document the reason for using the Emergency 
Change process, 

3. Security Review 

The ISSO/Configuration Manager will review the CR to determine what, if any 
impact the change has on the system and its associated C&A package. The 
ISSO/Configuration Manager may make a positive or negative 
recommendation. The reason for a negative recommendation must be 
documented in the CR, Regardless of the ISSO/Configuration Manager's 
recommendation, the CR, with the ISSO/Configuration Manager's comments 
is forwarded to the CCB. 

4. CCB Review 

The CCS will review the CR to determine what, if any impact the change to 
the system has on operations. The CCB may approve or deny the CR. The 
reason for denial must be documented in the CR. Moreover, the DMS 
Development Project Manager may override the recommendation of the 
ISSO/Configuration Manager. If the ISSO/Configuration Manager's decision 
is overridden, the reason must be documented in the CR. If the CCB denies 
the CR or if the DMS Development Project Manager does not override a 
negative ISSO/Configuration Manager recommendation, the changes to the 
production systems must be rolled back. 

5. Update Documentation 

Prepare any documentation updates. Documentation updates may include 
an entirely new version of the document or an updated section, table or 
diagram. In the case of an updated section, table or diagram, ensure that 
the update contains the proper section/figure/table number and labeling. 
Documentation updates are forwarded to the Documentation Configuration 
Manager. 

5a. Rollback Changes 

If the CCB denies the CR of if the DMS Development Project Manager does 
not override a negative ISSO/Configuration Manager recommendation, the 
changes to the production systems must be rolled back in accordance with 
DMS Standard Operating Procedures. 

6. Update DMS Document Tracking Sheet 

Documentation Configuration Manager will ensure that the documentation is 
correctly updated and tracked by updating and formatting the particular 
document and filling out DMS scripts and Inventory Database Document 
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Tracking Sheet. Note that if a decision was made to rollback the emergency 
changes, Step S does not occur. 


4 DMS Documentation Repository 

The DMS Development Project Manager Repository is located at 
httDs://rdc,lctl.oov/ trac/eiournals . Additionally, for documents that require hard 
copies to be maintained, the Documentation Configuration Manager prints hard 
copies annually if changes have been made in the prior year and places them in the 
office of the DMS Development Project Manager at the Adams Building and the 
Alternate Computing Facility. 

4.1 DMS Document Tracking 

The Documentation Configuration Manager using the DMS Sheet tracks all 
documents that are covered by this CMP and are contained in the DMS 
Documentation Repository. Additionally, each document has a date, version 
number and Revision History. The Documentation Configuration Manager uses 
input from the CR to update these items. 

o DMS Document Tracking Sheet 

The DMS Document Tracking Sheet is located at https://rdc.lctl.aov/trac/etournals . 

The Documentation Configuration Manager registers document names and issues 
Document 10 numbers. Document ID numbers are tracked exclusively in the DMS 
Document Tracking Sheet. The Documentation Configuration Manager will resolve 
document name collisions and enforce naming conventions. 


Figure 3 - DMS Document Tracking Sheet (Sample) 


Document 

ID 

Document 
Path and 
Name 

Version 

Update 

Date 

Status 

Hard Copy 
Required 






j 








4.2 Submitting New Documents to the DMS Documentation Repository 

Submitting new documents to DMS Documentation Repository is performed using a 
Change Request. 

Soft copies of the documents are preferred. The Documentation Configuration 
Manager will not create soft copy documentation from hard copy documentation. 

4.3 Removing Documents to the DMS Documentation Repository 

Removing documents from the DMS Documentation Repository is performed using 
a Change Request. 
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Removal of documents entails destroying all copies of the documentation per the 
DMS SOPs and changing the Status to Removed in the DMS Tracking Sheet. 

5 CHANGE CONTROL OF DMS CONFIGURATION PLAN 

This CMP may be changed with the approval of the CC8. The CC8 must review the 
plan annually, at a minimum, to determine its effectiveness and determine whether 
changes are necessary. 


Security Categoiy: Low 
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6 Appendix A - Change Request Form 


Change Request Number (Configuration Manager ] 
use only) \ 

Change Agent Information 

Change Agent Name 


Email Address 


Telephone Ext, 


Department 


Date/Time 


1 Change Information 

Emergency Change 
(Y/N) 


Documentation Only 
(Y/N) 


Systems Affected 


Documentation Affected 


Path and file name of 
attached test 
documentation 


Path and file name of 
attached document 
updates 



Describe and List the Change(s) to be performed (Include Interconnections) 


Describe why the Change Is necessary (Change Agent Analysis) (Include potential 
Impact) 


Security Category: Low 
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Security Recommendation 

Yes 

No 




CCB Recommendation 

Approve 

Deny 

L, - _) 
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1 Purpose 

This Memorandum of Understanding (MOU), between Information Technology Services (ITS) and the 
Copyright Technology Office (CTO), establishes the basis for a cooperative effort between the two 
organizations, CTO will develop an incident & Service Request Manager Workspace for Copyright’s 
internal and external clients using the ITS-hosted instance of BMC's Footprints in the LOCTEST 
environment, ITS will manage and maintain the centralized hosted system (BMC Footprints) within the 
LOCTEST environment, while CTO will configure separate, dedicated workspaces within that system to 
meet their requirements. 

ITS is in the process of configuring and enhancing the ITS Incident & Service Request service 
management workspace, which will result in a future release in production that may be substantively 
different from its current implementation. As such, the configuration undertaken by the CTO to develop 
Incident & Service Request services for their internal and external users will need to be modified to 
comply with these changes, ITS will communicate these changes to CTO as they are designed and 
planned, but will rely on CTO to document their configurations so as to minimize the impacts of any 
required configuration re-work. 

2 Supersedes 

This MOU supersedes all other MOUs between the two organizations concerning the Copyright Incident 
& Service Request workspace using BMC Footprints, including the previous version of this MOU. 

3 Scope 

The scope of the project is as follows; ITS will create one Copyright workspace that will support Incident 
& Service Request service management for both their internal and external users. ITS will create the 
Copyright workspace using a template of the existing ITS Help Desk Incident & Service Request 
workspace that exists in LOCTEST. CTO will configure the workspace in accordance with the 
requirements identified for their internal and external clients; CTO will document this configuration. ITS 
and CTO will collaborate on those use cases/scenarios where tickets must be escalated and routed 
between the two organizations. The deployment of a Copyright Incident & Service Request workspace 
in production is not included in the scope of this effort. Organizational responsibilities vary throughout the 
project; Section 4 provides details. 

3.1 Included in Scope 

• Provision Incident & Service Request Workspace for CTO Internal and External Users - 

ITS will provision an Incident & Service Request workspace to CTO so that they may configure 
and test for Copyright's internal and external users, based on the existing ITS Help Desk 
workspace template in LOCTEST 

• Configure and Implement Incident & Service Request Workspace for CTO Internal and 
External Users - CTO will design and configure a CTO Incident & Service Request workspace 
for their internal and external users in LOCTEST 

• Identify potential escalation and transfer use cases/scenarios between CTO & ITS - To 
standardize and facilitate the escalation and transfer of Incident & Service Request tickets 


2/12/2013 
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between CTO and ITS, the teams will work to identify use cases and scenarios that will inform 
design and configuration of both ITS Incident & Service Request workspace and the Copyright 
Incident & Service Request workspace 

• Monitor, maintain & manage BMC Footprints in LOCTEST - ITS Operations will monitor 
performance of the BMC Footprints system in LOCTEST, apply patches to the system, and make 
regular backups of the system 

3.2 Not Included in Scope 

• Provision Incident & Service Request Workspace for CTO Internal and External Users in 
Production- Provisioning, configuration and deployment to production of the Copyright Incident 
& Service Request Workspace for internal and external users in Production will follow a future 
release of the ITS Incident & Service Request Workspace in Production; dates for this release will 
be identified in the future 

• Problem Management Workspace - Problem management capabilities and a corresponding 
workspace may be introduced in later phases of the Copyright IT Service Management/FootPrints 
Implementation 

• Change Management Workspace - Change management capabilities and a corresponding 
workspace may be introduced in later phases of the Copyright IT Service Management/FootPrints 
Implementation 


4 Responsibilities 

ITS has primary responsibility for monitoring, maintaining and managing the BMC Footprints in 
LOCTEST; CTO has primary responsibility for configuring the Copyright Incident & Service Request 
workspace in accordance with requirements previously identified requirements. However, due to the 
integrated nature of the Incident & Service Request service management workspaces, availability of 
resources, and the future responsibilities of the organizations, It is desirable at this point to identify 
specific areas of organizational responsibility throughout the project lifecycle. This will prevent future 
confusion and disagreement when the project is well underway. Leadership for each area will be 
designated by the Project Manager, 


2/12/2013 
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Area 

CTO 

ITS 

Notes 

P = Perform, C = Consult, M^MInorto 
none, I = Inform 

— 



During LOCTEST Development 

Develop Requirements 

P 

I 


Provision incident & Service Request 
workspace for internal and external CTO 
users 


P 

Workspace will be created from the 
existing ITS Help Desk workspace that 
exists in the BMC Footprints system in 
LOCTEST 

Develop Configuration Incident & Service 
Request workspace for internal and external 
CTO users 

P 

I 


Document Configuration Incident & Service 
Request workspace for internal and external 
CTO users 

P 


This will be critical, as ITS is working to 
enhance the ITS incident & Service 
Request workspace, which will result in 
a variance from the initial ITS Help 

Desk template from which the CTO 
workspaces will be created. 

Monitor, maintain & manage BMC Footprints 
system in LOCTEST 

I 

P 

This will include backups, performance 
monitoring, and patching of the BMC 
Footprints application and database 
servers, CTO will be informed 
regarding potential impacts to their 
work resulting from these activities. 

Provide technical support and consultancy 
for the Footprints tool 

P 

c 

Responsibility for technical support 
and consultancy regarding the 
configuration of the too! will be with the 
SU, Substantial help resources are 
available within the tool itself. SU 
should designate a primary individual 
who may contact the vendor (via email 
or phone) with support questions (this 
is currently allowed, per the terms of 
the agreement with BMC— the terms of 
the agreement regarding support is 
subject to change without notice). A 
Footprints user group will be formed at 
LC and can serve as a forum for 
discussing technical, configurations or 
strategic questions regarding the tool. 

Analyze & define use cases/scenarios for 
escalation and transfer of Incident & Service 
Request tickets between CTO and ITS 

P 

P 
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I Area 

CTO 

ITS Notes I 

Test Incident & Service Request workspace 
for internal and external CTO users 

P 

I 

c 


Area 

CTO 

ITS 

Notes 

P = Perform, C = Consult, M=Minorto 
none, I = Inform 




Post4.0CTEST Development 

Identify Licensing Requirements 

P 


CTO will need to make the 
determination as to their Footprints 
licensing needs for future Production 
deployment and provide this 
information to ITS. Licensing structure 
offers named licenses and concurrent 
licenses 

Acquire Workspace Administrator Training 

P 

M 

CTO will be responsible for requesting 
and funding of BMC Footprints 
Workspace Administrator Training 

Coordinate & Communicate Migration 

Methods 

P 

C 

CTO will be responsible for 
documenting and communicating their 
migration & configuration methodology 
for moving to Production, ITS will 
collaborate closely with CTO to 
communicate any changes to the 
current production release that may 
impact CTO's configuration. 

Develop Production MOU 

c 

P 

As plans and dates are determined for 
a CTO Incident & Service Request 
workspace in Production, ITS will 
develop an MOU to formalise 
expectations between CTO and ITS 


5 Additional Requirements 

• All parties shall adhere to the provisions of this MOU/ISA, 

• The team shall adhere to all Library of Congress Regulations (LCRs), and applicable policies and 
security directives. 
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6 Communication 

Communication is key to maintaining the connection. Communications between ITS and CTO shall 
formally occur on Mondays, at the previously scheduled bi-weekly meeting between EUC and CTO. This 
meeting shall be organized by the ITS Service Management Program team. This meeting will have an 
agenda distributed two (2) business days prior to the meeting date, and shall have meeting minutes 
disseminated four (4) business days after conclusion. 

There will be other communications, as required by either party, during the life of this development 
initiative. 

7 Duration 

This agreement shall remain in effect Indefinitely, until superseded. 

8 Amendments 

This document will be visited during the duration of the effort as needed, to successfully realize the 
common objectives. The Director of ITS and the CTO Director must review and agree to any proposed 
changes. This document will be considered under change management, 

9 Procedure for Resolving Disputes 

Any disputes that cannot be resolved at the project level will escalate to the Director of ITS and the CTO 
Director for resolution. 
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Joel C. Willemssen 

Managing Director, Information Technology 
U.S. Government Accountability Office 
441 G. St.NW 
Washington, D.C. 20548 

Dear Mr. Willemssen, 

Thank you for testifying during the Committee on House Administration’s December 2, 2015 Hearing 
on Improving Customer Service for the Copyright Community. The Committee requests you respond 
to additional questions that will be made part of the hearing record. Please provide your responses to 
the following questions to the Legislative Clerk, C. Maggie Moore (Maggie.Moore@mail.house.gov ) 
with the Committee by March 7, 2016. 

1. In previous discussions, you have mentioned the Copyright Office must be specific in stating 
its imique needs to accomplish its goals to improve user experiences and modernize IT 
operations. Are there ways you would recommend to complete this, and to your knowledge, has 
the office made any progress in doing so? 

2. Has the Copyright Office completed the necessary work to justify proposed large scale IT 
investments, such as efforts at recordation reform? If not, what work needs to be completed 
first? 

3. One of the key recommendations for the Library was to produce an IT strategic plan. The 
Library has indicated they are still working to finalize that. One observation GAO has made in 
past discussions is that the Library must solidify its Library-wide, core IT services so that the 
service units could build off of it. What are some ways the Library could incorporate that 
thought into its IT strategic plan? 

4. Some people have observed that hosting Library and Copyright IT systems in the Madison 
building is inherently risky because of the limitations and lack of redundancy in that building 
and associated data center. What are your conclusions on this issue and would you have any 
further guidance for the Library? 

5. With your experience in auditing government IT systems, have you ever encountered a 
situation where the IT processes and systems within separate divisions of an organization are so 
inherently conflicting that the best course of action would be to completely split off one portion 
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of the original organization? 

6. How would you assess the maturity of IT processes and systems within the Copyright Office, 
as compared to other government organirations that you have had experience with? 

If you have any questions concerning this mattar, please feel free to contact Brad Walvort on the 
Committee Staff at (202) 225-8281 . Thank you again for your testimony. We look forward to hearing 
from you. 


SincCTely, 



Chairman 
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Post Hearing Questions for the Record 
Submitted to Joel Willemssen 
From Chairman Candice S. Miller 


“Improving Customer Service for the Copyright Community” 

December 2. 2015 

1. In previous discussions, you have mentioned the Copyright Office must be specific in 
stating its unique needs to accomplish its goals to improve user experiences and 
modernize IT operations. Are there ways you would recommend to complete this, and to 
your knowledge, has the office made any progress in doing so? 

As we reported in March 2015, the Copyright Office had been reacting to short-term needs and 
needed to develop concrete plans and strategies for how IT would support its mission and 
business needs in the longer term.' In addition, we reported that while the office had identified 
several proposed initiatives for making technology-related improvements and requested about 
$7 million to fund them, it had not developed plans and proposals to justify those investments. 
Thus, we recommended that the office develop (1) more detailed plans for its proposed IT 
improvement initiatives and (2) an IT strategic plan with prioritized IT goals, measures, and 
timelines to guide its improvement efforts and that is aligned with the Library’s ongoing strategic 
planning efforts. Taking these steps will help the office articulate the technology it needs to 
achieve its goals and better position it to effectively prioritize, manage, and monitor the progress 
of its IT improvement efforts. 

Since our report was issued, the Copyright Office has made progress in implementing these 
recommended actions. In November 2015, Copyright officials provided us with plans that had 
been developed for three IT improvement initiatives proposed for funding in fiscal year 201 7. 
These initiatives were tor software and hardware upgrades, searchable historic copyright 
records, and a data management initiative. The plans for these three initiatives included key 
elements such as a business problem and proposed solution, expected benefits, alignment with 
the Library’s strategic plan, and initial 3-year cost estimates and funding sources. 

In addition, the office recently developed a provisional IT strategic plan, which describes a 
proposed IT operating model, future architecture, timelines to guide its improvement efforts, cost 
estimate, and risks.^ However, it appears that the plan does not include prioritized IT goals and 
measures. Without prioritized IT goals, it is unclear how the plan supports the unique needs and 
mission of the Copyright Office. Additionally, it appears that the Copyright Office IT strategic 
plan may not be fully aligned with the Library’s strategic planning efforts. For example, although 


'GAO, Information Technology: Copyright Office Needs to Develop Plans that Address Technical and Organizational 
Challenges. GAO-15-338 (Washington, D.C.: Mar. 31. 2015). 

^U.S. Copyright Office, Provisional Information Technology Modernization Plan and Cost Analysis (Feb, 29, 2016). 

On March 1 , 2016, the Copyright Office posted a notice of inquiry seeking public comments on its plan. The comment 
period will close on March 31 , 2016. 81 Fed. Reg. 10,672. 
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the Library’s December 2015 IT strategic plan calls for the Library to provide a sustainable IT 
infrastructure that can be scaled to meet the changing and expanding needs of the entire 
organization, the Copyright Office plans to acquire separate core IT services, to include many 
“commodity” IT^ services that the Library currently provides for the office. In finalizing its IT 
strategic plan, it will be important for the Copyright Office to ensure that its plan includes 
prioritized IT goals and measures and is clearly aligned with the Library’s strategic planning 
efforts, to include the Library’s December 2015 IT strategic plan, 

2. Has the Copyright Office completed the necessary work to Justify proposed large scale 
IT investments, such as efforts at recordation reform? If not, what work needs to be 
completed first? 

While the Copyright Office has taken some actions to justify its IT investments, more work 
remains to be done to ensure that they support the office's long-term needs and goals. As noted 
in our report, the Copyright Office did not develop plans to justify and provide direction for its 
investments, as called for by leading practices, and it had not developed an IT strategic plan. 
The Copyright Office had proposed improvement projects that included, among other things, 
reengineering the recordation process from an IT, legal, and administrative perspective and 
ultimately developing an online filing system. In addition, the office had researched needed 
technical upgrades to its electronic registration process and identified four areas in greatest 
need of Improvement, which also resulted in proposed recommendations for improvements in 
these areas. However, at the time of our review, little detailed planning had been carried out for 
these improvement efforts. 

With regard to longer-term efforts, such as recordation reform, in planning for and justifying 
related IT investments, the office can follow and build on the approach it has taken for its three 
IT improvement initiatives proposed for fiscal year 2017. However, as mentioned previously, it 
appears that the Copyright Office’s recently developed IT strategic plan does not identify 
prioritized IT goals and measures. Without such goals and measures, it is unclear how the 
office’s proposed Investments support its overall strategic goals and thus whether the initiatives 
are justified. 

3. One of the key recommendations for the Library was to produce an IT strategic plan. 
The Library has indicated that they are still working to finalize that. One observation GAO 
has made in past discussions is that the Library must solidify its Library-wide, core IT 
services so that the service units could build off of it. What are some ways the Library 
could incorporate that thought into its IT strategic plan? 

The Library issued an updated IT strategic plan on December 31, 2015, that covers fiscal year 
2016 through 2020. In the plan, the Library identifies four IT strategic goals and a number of 
supporting objectives. The four strategic goals are: (1) provide strategic direction and 


^According to 0MB, commodity IT includes services such as IT infrastructure {data centers, networks, desktop 
computers and mobile devices); enterprise IT systems (e-mail, collaboration tools, identity and access management, 
security, and web infrastructure): and business systems (finance, human resources, and other administrative 
(unctions). 


2 



535 


leadership, (2) improve IT investment management, (3) deliver business-driven capabilities, and 
(4) strengthen protection for systems and information. 

Several of the objectives identified to support these goals relate to improving core IT services 
and capabilities. For example, in its plan the Library states that it intends to support a 
sustainable IT Infrastructure that can be scaled to meet the changing and expanding needs of 
the entire Library; establish an IT investment management process that is driven by strategic 
planning and business priorities; integrate best practices for risk management, cost and 
schedule management, and service-level agreements into IT project management and 
operations; and continuously monitor and assess IT networks, systems, and services to ensure 
information security. Further, each objective has associated “next steps" that the Library intends 
to carry out. 

As described, these efforts are in alignment with many of the recommendations we made in our 
report. However, the plan lacks performance measures that would permit senior leadership to 
assess whether the Library is succeeding. In the absence of such measures, the Library will be 
hindered in gauging its progress in strengthening core IT services and capabilities, and it will be 
difficult for oversight bodies, such as Congress, to hold it accountable for results. 

4. Some people have observed that hosting Library and Copyright IT systems in the 
Madison building is Inherently risky because of the limitations and tack of redundancy in 
that building and associated data center. What are your conclusions on this issue and 
would you have any further guidance for the Library? 

According to the Library's fiscal year 2017 budget justification, its current computing facility in 
the James Madison Memorial Building does not have adequate redundancy for power or 
cooling. In particular, the Library explained in its budget justification that the building’s backup 
generators, which are 35 years beyond their service life, cannot handle the power demand of 
the computing facility when power is shut down in an annual fire and safety inspection. 
Consequently, according to the Library, the Library needs to shut down its computing facility 
during this inspection. However, according to the Library’s budget justification, shutting down 
the primary computing facility has resulted in hardware failures and a 9-day outage of the key 
Copyright Office systems. Although the Library’s Deputy Chief Information Officer (CIO) clarified 
that the planned computing facility shutdown was not the direct cause of the extended outage,'* 
we agree that there are risks associated with this facility. 

According to its fiscal year 2017 budget justification, the Library is requesting $57.7 million over 
the next 3 years to move its primary computing facility in the Madison building to a different site. 
If received, the Library plans to use these funds to move to a facility that has redundant power 
and cooling components in order to avoid the need to shut down its data center during an 
extended power outage. 


■•in February 201 6, the Deputy CIO explained that outage was the result of an incorrectly executed change to key 
infrastructure that was performed during the planned data center shutdown. 
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It is important to note, however, that the Library currently has an alternate computing facility and 
that it may be able to use this facility to maintain its IT operations during a planned power 
outage. As the Library assesses alternatives for its primary computing facility, it will be important 
for it to identify and consider a range of alternatives, to include the use of existing resources, 
and select a preferred alternative that best meets its mission needs in a cost-effective manner. 

Additionally, it will be important for the Library to ensure that it has developed appropriate 
contingency plans to provide assurance that, when unexpected events occur, essential 
operations can continue without interruption or can be promptly resumed and that sensitive data 
are protected. As stated in our March 2015 report on the Library’s management of information 
technology, the Library has developed a policy on contingency planning that requires system 
owners to ensure, for each IT system under their purview, the development and maintenance of 
a contingency plan.^ However, only three of the nine systems we reviewed had a complete 
contingency plan to ensure that their operations could be recovered quickly and efficiently if 
disrupted. Without such plans, the Library may have delays in recovering systems or may be 
unable to recover systems entirely in the event of a large disaster. We recommended that the 
Library develop contingency plans for all of its systems. The Library agreed with our 
recommendation, in February 2016 the Library’s Deputy Chief Information Officer told us that 
the Library is reviewing its contingency planning efforts, starting with its most critical systems. 
She stated that the Library is aiming to establish contingency plans for its most critical systems 
by December 2016 and for its remaining systems no later than September 2018. 

5. With your experience in auditing government IT systems, have you ever encountered a 
situation where the IT processes and systems within separate divisions of an 
organization are so inherently conflicting that the best course of action would be to 
completely split off one portion of the original organization? 

Many federal agencies face challenges in managing their IT portfolio across a large, 
decentralized, or diverse organization. As both we and the Office of Management and Budget 
(0MB) have reported, duplicative, wasteful, and low-value investments have proliferated over 
the years, highlighting the need for agencies to avoid such investments whenever possible. 

In the most recent update to our high-risk list we identified a new government-wide high-risk 
area: improving the management of IT acquisitions and operations.® We noted that federal IT 
investments too often fail to be completed or are over budget and behind schedule while 
contributing littie to mission-reiated outcomes. Contributing these concerns, executive-level 
governance and oversight across the government has often been ineffective, specifically from 
chief information officers (CIO). For example, we have reported that not all CIOs have the 
authority to review and approve the entire agency IT portfolio and that CIOs’ authority was 
limited, and we have noted the need to strengthen CIOs’ authority to provide needed direction 
and oversight. 


®GAO, Library of Congress: Strong Leadership Needed to Address Serious Information Technology Management 
Weaknesses, GAO-15-315 {Washington, D.C.: Mar. 31, 2015). 

®GAO, High-Risk Series: An Update. GAO-15-290 (Washington, D.C.: Feb. 11, 2015). 
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While the executive branch has undertaken numerous initiatives to improve the management of 
IT across the government, including OMB’s TechStat,’’ data center consolidation, and 
PortfoiioStat initiatives, implementation of these efforts has been inconsistent. In particular, the 
PortfolioStat initiative is focused on rationalizing agencies’ portfolio of IT investments to reduce 
or eliminate duplicative, overlapping, or low-value investments. In some cases, agencies were 
hindered in their ability to Improve the management of their IT portfolio by limitations in the 
agency CIO’s ability to review and approve the entire portfolio. Recognizing the need to 
strengthen the role of agency CIOs, in December 2014 Congress enacted federal IT acquisition 
reform legislation (commonly referred to as the Federal Information Technology Acquisition 
Reform Act or FITARA) that requires CIOs at designated executive branch agencies to, among 
other things, approve (1 ) IT budget requests of their respective agencies, (2) contracts for IT, 
and (3) the appointment of other agency component employees with the title of CIO.® 

As we have emphasized previously, a decentralized agency organization incorporating diverse 
mission units can function successfully when the central IT office has responsibility for delivering 
commodity IT services, while requirements for mission-specific systems are driven by the 
business units. However, as we noted in our report on IT management at the Library, its CIO 
position did not have adequate responsibility for the agency’s IT — in particular authority over 
commodity IT and oversight over mission-specific systems developed or acquired by other 
service units. In addition, the Library's central IT office had not ensured that its services were 
supporting the needs of the other service units by, for example, establishing service-level 
agreements for all these services that include agreed-upon performance targets and developing 
a plan for increasing customer satisfaction. 

Since our report was issued, the Library appointed a new permanent CIO in September 2015; 
however, it rerqains to be seen whether he will be provided with clear responsibility and 
adequate authority for leading improvements in the management of the Library’s IT. 

Additionally, the Library has yet to fully implement our recommendations aimed at developing 
service-level agreements that appropriately cover all services and include service-level targets, 
and to develop a plan for increasing customer satisfaction. Ensuring that the Library’s CIO has 
the appropriate authority is key to making needed improvements in the face of long-standing 
challenges. 


’’TechStat sessions are face-to-face meetings to terminate or turn around IT investments that are failing or are not 
producing results. These meetings involve 0MB and agency leadership and are intended to increase accountability 
and improve performance. 

^Federal Information Technology Reform provisions of the Carl Levin and Howard P, 'Buck' McKeon National 
Defense Authorization Act for Fiscal Year 2015, Pub. L. No. 113-291 § 831(a) (Deo. 19, 2014), adding 40 U.S.C § 
11319. Although this law is not applicable legislative branch agencies such as the Library, It demonstrates that 
Congress recognizes the importance of strong CIOs in federal agencies. 
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6. How would you assess the maturity of IT processes and systems within the Copyright 
Office, as compared to other government organizations that you have had experience 
with? 

The Copyright Office is a small organization when compared to other agencies we have 
reviewed. In our March 201 5 report, we noted that the office had a staff of about 380 
employees. We also reported that the Library had about 3,746 employees (which included those 
within the Copyright Office). Responsibilities for managing IT at the Copyright Office are shared 
between Copyright Office staff and organizations at the broader Library level. For example, 
while the Copyright Office manages many of its systems (e.g., eCO, the copyright registration 
system), the Library’s Office of Information Technology Services (ITS) manages and controls 
the infrastructure (e.g,, networks, servers, and data center) on which the systems and 
applications reside. Such a division of responsibilities is common at other federal agencies. 
Many agency CIOs are responsible for delivering commodity IT to other units, while mission- 
specific systems are managed by the organizations that use them. 

Our work, Copyright Office employees, and external users have all identified challenges with the 
office's current IT environment, such as in the performance and usability of systems, security, 
data integrity, and data availability and retention. For example, in March 2015 we reported that 
the eCO system — ^which is managed by the Copyright Office — had many issues related to 
performance and usability. 

These challenges are not unique to the Copyright Office, and they have been experienced 
across the federal government. For example, we have reported on significant performance and 
usability issues affecting the Centers for Medicaid and Medicare Services' Healthcare.gov and 
related systems,^ and we have long identified security issues affecting the confidentiality, 
integrity, and availability of information at executive branch agencies.’” Further, as previously 
mentioned, we recently identified improving the management of IT acquisitions and operations 
as a government-wide high-risk area.” 

in both our report on the Copyright Office and our work on IT management at the Library as a 
whole, we identified a number of management weaknesses contributing to challenges across 
the organization. Addressing these weaknesses is key to enhancing the management 
processes and strengthening the systems that the Copyright Office relies on to carry out its 


”See GAO, Healthcare.gov: CMS Has Taken Steps to Address Previews, but Needs to Further Implement Systems 
Development Best Practices, GAO-1 5-238 (Washington, D.C.: Mar. 4, 201 5); Healthcare.gov: Actions Needed to 
Address Weaknesses in Information Security and Privacy Controls. GAO-14-730 (Washington. D.C.: Sept. 16, 2014); 
and Healthcare.gov: Ineffective Planning and Oversight Practices Underscore the Need for Improved Contract 
Management, GAO-14-694 (Washington, D.C.: July 30, 2014). 

^^Since 1997, we have designated federal information security as a government-wide high-risk area, and in 2003 
expanded this area to include computerized systems supporting the nation's critical infrastructure. Most recently, in 
the February 201 5 update to our high-risk list, we further expanded this area to include protecting the piivacy of 
personally identifiable information (PI!) collected, maintained, and shared by both federal and nonfederai entities. 
See. most recently, GAO, High-Risk Series: An Update, GAO-15-290 (Washington, D.C.: Feb. 11, 2015). 

^^GAO-15-290. 
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mission. As noted above, since our report was issued, the office has made progress in further 
developing its plans for improving its IT environment. Continuing and building on these efforts 
will better position the Copyright Office to ensure that its IT investments meet its needs and 
those of its stakeholders and customers. 
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The Chairman. Typical, right? You go back to your office, all of 
a sudden you think, geez, I should have asked them this. 

At any rate, we thank you all very much. We look forward to con- 
tinuing to work with all of you for our mutual constituency, quite 
frankly. We all have the same constituent in this case, the Amer- 
ican taxpayer. 

Without objection, this hearing is now adjourned. Thank you. 

[Whereupon, at 12:29 p.m., the Committee was adjourned.] 
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